News for hackers. Stuff that matters.

A comment on Microsoft's Recall AI feature is now indefinitely delayed. Parent comment

Re:Microsoft's Recall AI feature is now indefinitely delayed by patmorgan23 on Friday June 14, 2024 @04:03PM (#40684519)
Per one of the ars Technica articles, All the information collected was stored locally completely unencrypted, and would be accessible by anyone with local administrator rights.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by slashdave on Friday June 14, 2024 @05:17PM (#40685230)
Nevermind accessible to other users, but accessible to any 3rd party application that the user executes. A nightmare of a security hole.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by ranger_danger on Friday June 14, 2024 @06:19PM (#40685671)
That's already true for every desktop application though. All third party programs can spy on all other programs and documents that user has available. This has been a seemingly criminally-overlooked shortcoming of desktop systems and this approach has fallen WAY behind current mobile security practices.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by shuckles on Friday June 14, 2024 @06:31PM (#40685758)
This is not true on macOS.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by johnisgood on Saturday June 15, 2024 @08:05AM (#40689265)
That is why "firejail" exists.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by ranger_danger on Sunday June 16, 2024 @11:41PM (#40702135)
The attack surface of firejail itself scares me enough to never use it.
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by johnisgood on Monday June 17, 2024 @06:04AM (#40703995)
Care to elaborate?
[ Parent | on HN ]
Re:Microsoft's Recall AI feature is now indefinitely delayed by mihaaly on Saturday June 15, 2024 @07:09AM (#40688983)
What if it was encrypted but the key need to be present locally anyway. Key under the mat situation? PIN on the back of the card case?
[ Parent | on HN ]