The article discusses privacy issues surrounding Microsoft's Recall feature, which indexes sensitive user data including Zoom meetings, emails, photos, and messages from apps like Signal. Researcher Kevin Beaumont found shortcomings in the control features, such as capturing payment details and easily decrypting databases. Without means to prevent indexing, developers are left to implement 'hacks' to ensure privacy. Signal is using a DRM API as a workaround to safeguard content. However, this solution is limited, and the article highlights the need for more comprehensive developer tools from Microsoft.
We hope that the AI teams building systems like Recall will think through these implications more carefully in the future. Apps like Signal shouldn't have to implement 'one weird trick' in order to maintain the privacy and integrity of their services.
When Recall is turned on, it indexes Zoom meetings, emails, photos, medical conditions, and Signal conversations, not just with the user, but anyone interacting with that user, without their knowledge or consent.
Collection
[
|
...
]