VENDORiQ: Microsoft – Recalling the Recall Feature

Why it’s Important 

The Recall is part of Microsoft’s broader strategy to embed AI capabilities directly into the Windows operating system, enhancing productivity and user experience. The Recall feature aims to function as a memory aid, taking periodic screenshots to create a visual timeline of users’ PC activity. It allows searching past content using natural language descriptions. The Recall feature not only enhances the user experience but also provides developers with new tools and opportunities to create more sophisticated, context-aware, and intelligent applications within the Windows ecosystem.

While Recall offers convenience, it has also raised serious privacy concerns about how users’ sensitive data, like passwords, personal information, and financial details, will be safeguarded against hackers. Security and privacy experts are especially concerned about how this data is stored, who can access it, and the potential for it to be misused.

Many researchers have found ways of accessing sensitive information in Recall screenshots. Few also have developed open-source tools to automate the task. 

To address security and privacy concerns, Microsoft had to roll back its Recall feature and announced three new security-oriented updates for it:

1. In a reversal of its initial stance, Microsoft will now ship Recall turned off by default.
2. Users will need to enrol in ‘Windows Hello’ to enable it, and so-called ’proof of presence’ for biometric authentication will be required to use its primary features.
3. Recall data will be encrypted, and only decrypted and accessible once a user authenticates via Windows Hello.

IBRS suggests that despite Microsoft’s efforts to implement safeguards addressing privacy concerns around the Recall feature, users will continue to feel apprehensive about its usage. 

Who’s Impacted

• Developers
• Commercial and personal Surface users
• CISOs

What’s Next

• Microsoft could consider adding extra security measures, such as two-factor authentication or PIN protection, for accessing Recall functionalities. 
• Conducting third party audits and releasing regular transparency reports on Recall’s data handling practices could help build user trust and confidence in the feature’s security.

Related Advisory

• VENDORiQ: Microsoft’s New AI-Enabled PCs – Strong ARM Tactics Or Shape Of Things To Come?