How to avoid Windows Recall as a Linux user? (slrpnk.net)

submitted 7 hours ago* (last edited 7 hours ago) by arscynic@slrpnk.net to c/privacy@lemmy.ml

31 comments fedilink hide all child comments

If one chats/mails with a person using Windows, despite using secure private protocols, every message will be stored by Microsoft's Windoze Recall. Either I'm missing something but this feature seems like the most grotesque breach in online privacy/security.

What are ways to avoid this except for using obfuscated text?

top 31 comments

sorted by: hot top controversial new old

[-] glimse@lemmy.world 10 points 1 hour ago

Turn off your computer, move to a cave in the mountains, and abandon society.

A bit extreme but there is nothing you can do to stop your messages from appearing on Windows machines except not sending them to anyone who might view them on Windows machines...which will definitely be nearly impossible in 2024

[-] Kryptonidas@lemmy.wtf 32 points 3 hours ago

If you tell something to someone else, assume it’s compromised.

[-] toynbee@lemmy.world 6 points 1 hour ago

"Three can keep a secret if two of them are dead."

(Even then I'm not so sure)

[-] autonomoususer@lemmy.world 2 points 1 hour ago* (last edited 1 hour ago)

You must start spreading libre software effectively. You don't control their device. You must show them how to fix it.

[-] MalReynolds@slrpnk.net 10 points 3 hours ago* (last edited 3 hours ago)

Wow, valid issue.

Spitballing, potentially a secure app could run memory only, blah, blah, blah. Nope, you've given M$ your screen FFS, it's all over. If you care, move elsewhere, tell your friends...

As you point out, codes are an option, but it's not a slippery slope, it's a waterslide.

[-] GetOffMyLan@programming.dev 5 points 2 hours ago

It can be turned off so it's up to the person you're messaging. Once you send something the person at the other end is in control of what happens to it.

[-] arscynic@slrpnk.net 4 points 2 hours ago

Once you send something the person at the other end is in control of what happens to it.

True, but this is the beauty of trust. I decide to communicate one way or another with someone depending on the level of trust. Them deciding to break that trust is a risk I chose to take. However, I do not choose to communicate with Microsoft, whatsoever. Windows Recall is the most blatant piece of spyware ever; beyond comprehension how this is so normalized.

[-] BananaTrifleViolin@lemmy.world 4 points 1 hour ago

Then you have to trust the person you are communicating with has turned off windows recall. That has to be the starting position.

Tools will come to block or break windows recall but it will still be based on trust that the recipient is using them. Privacy centred apps like Signal wouldn't want windows screen shotitng every message for example. There are many apps and tools including in the professional sphere that would not want their data leaking via recall so it will come.

Unfortunately it may come late in the professional realm probably after scandals break. Employers using recall data to investigate staff for example - it's bound to happen eventually.

My own organisation, a huge health organisation, has opted in to CoPilot. It's crazy in my view, even if our data is ring fenced in some way. I don't want private patient information being used to train Microsoft shitty tools, or stored on their servers. Regulation and the law is way behind when it comes to this stuff.

[-] GetOffMyLan@programming.dev 1 points 1 hour ago

You have to trust the person you're communicating with has turned it off. That's my point. It's an optional feature

[-] MentalEdge@sopuli.xyz 18 points 4 hours ago* (last edited 4 hours ago)

Don't forget that while they managed the PR better, apple "Intelligence" also has access to damn near everything on your devices.

[-] Pappabosley@lemmy.world 1 points 1 hour ago

People also willing submit to the cult if Apple and just believe everything they say. People are likely more frequently forced to use windows due to work or just the lack of choice for less technically confident people.

[-] pHr34kY@lemmy.world 73 points 6 hours ago

If it leaves your device, you cannot control it.

[-] Alexstarfire@lemmy.world 85 points 7 hours ago

Can't control what other people do so you might be out of luck.

[-] arscynic@slrpnk.net 1 points 1 hour ago

It's more about what Microsoft enforces—spyware—than what other people do.

[-] BlastboomStrice@mander.xyz 22 points 7 hours ago

Ugh, I didnt think about that😬

[-] jaxiiruff@lemmy.zip 14 points 6 hours ago

Me neither! Microsoft needs to be taken to court over this because it is a serious breach of privacy to not only record the users but even random bystanders as well. Now I am convinced this is just a backdoor for the government hiding in plain sight. Fuck them.

[-] CosmicTurtle0@lemmy.dbzer0.com 2 points 3 hours ago

Oh this 100% is the government backdoor that they've been begging for. "If you can innovate your way into it, you can innovate a way out of it."

That was in regards to Apple phones belonging to Boston bombers being encrypted and locked.

It's no surprise that behind closed doors, the government asked these companies to create backdoors for them to spy on people.

[-] reddig33@lemmy.world 14 points 6 hours ago

So is there a way for businesses to disable this garbage feature through managed device settings or something? I’m guessing corporate legal departments aren’t going to be too thrilled with this feature.

[-] egonallanon@lemm.ee 6 points 6 hours ago

There's a CSP for disabling it on windows enterprise devices at least. Not sure if there's a way for pro and home machines.

[-] Tobberone@lemm.ee 1 points 3 hours ago

There must be. Recall and info sec is mutually excluding by definition!

[-] Boomkop3@reddthat.com -1 points 2 hours ago

I'm in Europe :p

[-] arscynic@slrpnk.net 5 points 2 hours ago* (last edited 2 hours ago)

I'm afraid this comment shows a severe underestimation of the gravity of this issue. Windows recall doesn't stop at borders even if it were illegal there.

[-] Boomkop3@reddthat.com 0 points 1 hour ago

Well, it's not here yet. And I do use windows 11, as does my mom, my grandparents and other pc's I'm the one helping with. I don't recall any recalls :p

And if they do push it here, it's probably followed by a news headline "eu fined Microsoft 10 billion for gdpr violation" or something like that

[-] hddsx@lemmy.ca 6 points 7 hours ago

To my knowledge, there isn’t. But you can ask the person to turn off recall. I’m going to be running 11 in a VM myself so /me shrugs

[-] galileopie@lemmy.ml 7 points 7 hours ago

The code for Recall is in the code for File Manger. Recall cannot be turned off if you want Windows to load and function.

[-] GetOffMyLan@programming.dev 2 points 2 hours ago

There's literally an option to turn it off

[-] joeldebruijn@lemmy.ml 7 points 7 hours ago

Is this not accurate (anymore)? https://www.windowscentral.com/software-apps/windows-11/how-to-disable-windows-recall#section-how-to-uninstall-windows-recall

[-] helpImTrappedOnline@lemmy.world 2 points 2 hours ago* (last edited 2 hours ago)

That's just the off button. But you can't remove it because they tied it to explorer as a depenacy. Off or not, explorer doesn't work with out recall.

Turning it off is a good step 1, but what's stopping some malicious software, such as every windows update, from turning it back on and selling our data for profit.

[-] hddsx@lemmy.ca 1 points 13 minutes ago

I’m guessing being able to turn it off and not change during an update is a business grade feature. I’m guessing at least windows 11 pro will come with a permanent off switch

[-] themoonisacheese@sh.itjust.works 0 points 3 hours ago

If the content CNA be displayed, it can be parsed by recall.

The only way I can see to bypass it is to obtain DRM keys and display your content on a website only if widevine is active, like Netflix does. Surely it can't screenshot DRM protected content, but also this is Microsoft .

[-] Max_P@lemmy.max-p.me 3 points 7 hours ago

You can't, at that point you assume your correspondent is compromised. It's not just recall but also malware and credential stealers. Doesn't matter if recall is taking screenshots, if the messaging client itself is pwned via malware then they have full access to as much history as is available.

this post was submitted on 22 Oct 2024

68 points (94.7% liked)

Privacy

31609 readers

623 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS