Windows won’t take screenshots of everything you do after all — unless you opt in
2 years ago by floofloof to c/technology
Never did. It's just more and more obvious with each new "feature" that it's built for monetization, not for user functionality.
In the '90s and early 2000s, Microsoft's business model was the classic one of selling products to customers. Today, it's all about the cloud, advertising, and AI, where the product is the user.
My prediction is essentially one day windows pcs will be Linux that act like thin clients that go to windows 365.
“The ability to disable the…feature during the setup process…” does not mean opt in, that means opt out.
Knowing windows setup, you need to click customize during the setup process and then go through several setup pages before you’re presented this option (or have to dig into additional/advanced settings to find it).
Most people won’t do this, won’t know how to do this, or will receive the pc with the initial setup complete and won’t know if this is on or off.
The exact wording, which, again, is in the article you didn't bother to read before posting, is "Quickly find things you've seen with Recall. Recall helps you find things you've seen on your PC when you allow Windows to save snapshots of your screen every few seconds".
Seriously, I don't even like the feature. I will absolutely turn it off, just like I did Timeline, and I expect it'll be gone in the next version, just like Timeline was.
But I did look at the stupid article before posting. So there's that.
So, are we done berating everybody passive-aggressively with just a sprinkle of condescension? Because maybe, just maybe, I was making a remark about the general practice of Microsoft to hide stuff behind nondescript bullshit names (especially in non-English versions where the English bullshit name gets translated literally most of the time, which yields even more nondescript results).
Maybe, just maybe, you chose the wrong comments to act up on “PeOpLe NoT rEaDiNg ThE aRtIcLe” when all that was posted about was inconsequential stuff about the precise clicks needed to turn a feature off that's not even in the respective menus yet. So this is not someone talking bullshit because they misunderstood the headline about a murder case or something.
All that was said was about practices Microsoft has abused into oblivion: Hiding stuff behind obscure menus and hiding stuff behind obscure names. The comments made were a persiflage of exactly that.
Maybe, just maybe, the precise placement and wording in a menu that doesn't even exist yet is a topic inconsequential enough that people will not read the tenth article about the general subject (Copilot becoming “opt-in”) to make sure they wouldn't miss this super irrelevant point to the story. A point which you guessed from screenshots that haven't reached production yet (even if they are likely to go into production as shown, it can still change), so your condescending attitude is based on wobbly grounds.
There are tons of articles where people post absolutely wrong and quite absurd stuff because they didn't read the article. Some of them even matter (politics, world events). So let's criticize people when they don't read through actually important articles before posting, and agree that it's okay to not read the exact article posted on unimportant sidenote stuff if one knows about the thing in general. Because if I'd be only allowed to comment on the article posted itself, I wouldn't need Lemmy, I could just comment on the site that posted the article in the first place.
Besides: You did notice that you commented on two different people, yes? Because you sure sounded like you didn't read the usernames before commenting and thought you always replied to the same guy.
That is a very long rant to agree with me in that you care enough to rant about this online but not enough to read past the headline.
So no, I have no intention to shut off the condescension, there is nothing passive about my aggression and people absolutely don't read the article regardless of how important they feel the issue is. Yesterday this was all about the most important threat to the security of the average cosnumer, now it's "unimportant sidenote stuff". Somebody should have told MS how unimportant it is, could have saved the devs the crunch to fix it by the time it ships in 10 days.
For the record, you're right about how hard it is to find things sometimes in localized versions of OSs. That's true of all of them, though, and I blame the fact that we're all stuck here speaking the haegemonic language and reading about tech only in English while local journalists struggle to stay relevant, so we learn all the brand names and settings in English despite the software itself being available in localized versions. But that's a whole other conversation.
This is the screen the user is presented during setup.
Even without all the invasion of privacy implications, I'm skeptical it would even work. Source: 20 years of "Windows is checking for a solution to the problem" that has never worked even once.
I guess for the basic stuff I do when I've had programs crash I've never seen it do anything, but nice to know it's not completely useless
There is a screenshot of the opt-in screen in the article. There is no default, just two buttons to say yes or no.
I swear, outrage should only be allowed based on the amount of work one is willing to put in before expressing it. If you don't do the reading, you don't get to be publicly angry. It'd save us all so much trouble.
For the record, the feature was always optional, as per the original announcement. Presumably the change is it is now part of the setup flow where it was going to be a settings toggle instead.
Which is, incidentally, how this used to work the first time Windows had this feature, back when it was called "Timeline" in Windows 10.
It doesn't because that's one of the four or five screens during the initial Windows setup where you opt in and out of all the other spyware features. They all look the same and are prompted in sequence. Unless they're doing something very weird you absolutely have to make a choice on each of them and they are unskippable otherwise.
I mean, you don't have to know, if you don't know Windows you don't have to recognize them. But if you do it's pretty obivous, so you... you know, could have asked or looked it up.
Or gone through the link, because come on, you didn't. You were obviously just reacting to the headline.
The problem with MS is how they change these things in the future. It may be a clear choice now, but they will find a way to make it easier to "accidentally" opt in, or they'll simply change it to an opt-out. They've been doing this sort of bullshit for quite some time now.
They really haven't. Their onboarding flow has included this exact type of forced option for advertising data, location data and bug reports for what now? A decade, give or take? They have a very specific design language for these.
Plus, and I keep reminding people of this and they keep forgetting, they already made this feature once. It was on Windows 10, it was called Timeline, everybody turned it off and they never did much to change that, instead just adding a less intrusive offline version of it and ultimately removing it by the launch of 11 until... well, now.
What I don't understand is why you guys are so set on this specific list of grievances. You don't need to dismiss the improvements they are making. They are improvements and they are a good thing.
If you are set on rooting for or against OSs (and why would you, stop it, that's weird) you can instead just point out that... well, the feature itself is still garbage. Even with a default opt out, even assuming it's fully secure. It just covers no valid use case, unless you're starring in Memento II. It remains a security vulnerability because social engineering and shared computers are a thing. It is exactly as dumb and useless as Timeline was, and there's a reason nobody remembers that happened. The lack of AI search really, really isn't why that failed.
You don't need to come across as a paranoid conspiracy theorist making up slippery slopes to keep criticising this about the things they are actually fixing. There are plenty of valid issues with it at a fundamental design level they are not changing. Being so wildly speculative about the eeeeevil corporate MS lying to us just makes the criticisms sound less valid when the actual thing they are doing is still pretty useless at best, and most likely really bad.
Look, I use Microsoft products. I have since PC-DOS became MS-DOS. You are plain wrong. Just look at the whole fiasco where MS is practically forcing users to tie their windows license to an account. It used to be easy to circumvent, nowadays it's hidden like Waldo. They constantly do this shit. Stop shilling for corporations.
Remember when making a Microsoft cloud account was optional during Windows installs, and it was trivia to skip/opt out?
Pepperidge Farm remembers.
They are 100% going to do the same thing here.
Ok, let's assume (for the sake of argument) that everything is on the up-and-up, and Microsoft will behave in a completely equitable and user-friendly way with regard to this feature going forward. Where does that leave us?
There is a spyware feature built into Windows 11. It is off by default, but a malware that wants to capture this kind of information doesn't have to install anything, and it doesn't have to run any background processes that might get caught by a system monitor or blocked by application whitelisting. All it has to do is turn this built-in feature on, and then exfiltrate the data later.
Setting this off by default doesn't remove the security issue.
Ok, let's assume (for the sake of argument) that everything is on the up-and-up, and Microsoft will behave in a completely equitable and user-friendly way with regard to this feature going forward
This is so fantastical that there's no point in even having the hypothetical discussion about it.
You're right, it's fantastical, but it's still worth talking about.
It's worth talking about as it solidifies the argument more than just assuming your opponent is acting poorly. The argument of "Even if Microsoft is a saint, it's still a bad idea. But we know Microsoft also has a history of data collection, spying, anti-patterns etc." is a much stronger argument than the latter half on its own
You're right, it's fantastical, but it's still worth talking about.
Is it though?
It's a feature which is very clearly evil and of very little benefit to the user. Only a shit business like Microsoft would even attempt it, lie about it being secure, then make it "optional" (and we all know what that means) and it will still be an insecure mess when it's done, sucking down resources from a machine I purchased for no benefit to myself.
The "feature" by it's current definition can only be conceived of by a piece of shit organisation like Microsoft.
No need to separate the art from the artist in this case, as they are perfectly aligned.
They're just going to do a classical boil-the-frog operation:
- Step 1: Make it opt-in and present it as the new cool thing.
- Step 2: Make it opt-out, and if the users opts out, show a scary warning about how the cool thing won't work anymore.
- Step 3: Silently opt-in, and hide the opt-out option deeply in a settings menu.
- Step 4: Silently opt-in, remove opt-out, but it still works with a registry hack. Microsoft apologists will still thinks it's cool because "just use this simple registry hack bro".
- Step 5: Remove opt-out alltogether, and silently opt-in everyone who had previously opted out.
- Step 6: Enjoy their boiled frog!
You forgot Step 0: make an announcement so overtly egregious that when you walk it back, the compromise sounds reasonable
There's no reasonable form of this.
No but there sure is a much more unreasonable form of this.
The "two steps forward, one step back" maneuver. Classic.
Just disconnect your network cable, press this magic key combination and type this undocumented command: "MSBLAOIGKSDF /ACZSF"
...For now...
"For only $5.99 per month you can opt out of the service! Sign up today!" - MS in the likely near future
Cause they're going to show a pop-up that advertises some "cool new feature", and the 99% of users who aren't tech literate will say yes and never think about it again.
People on this site severely overestimate how much the average person cares and their overall level of tech.
Yup. Average user doesn’t know what pop or imap is and can’t use their tv remote to change an input.
People will be deceived into opting in via some UI anti pattern like they do with the online user accounts and onedrive now.
Because they'll add it to the list of coercively and deceptively worded questions they force you to answer before you can use a WIndows account, phrase it so as to sound useful and harmless, and have a big friendly "Sounds great!" button and a tiny "No thanks, I prefer my life to be shit" link.
Until they flip the setting by themselves because ms tend to do that
...says the company that wanted to destroy every bit of your privacy. I don't care what they "promise", don't listen to them.
Microsoft is finished. Install Linux.
Lies but ok.
I'm sure it's corporate speak for 'unless you opt into opting out of Microsoft recording everything's
I have zero reason to trust companies who are known to not be trust worthy.
And who's to say they don't have this 'opt in' setting enabled for a week then upon the first update, whoops...it was auto enabled for everyone 'sorry...you must not out now and sorry not sorry but we already stole everything. See y'all next update!'
If it's an embedded feature, then I categorically refuse to trust that I the user will have sole control over the on/off toggle.
I am basing my suspicions on Microsoft fucking around with my user settings over several decades and Windows iterations.
Microsoft will just enable it via an update once all the fervor dies down. They haven’t abandoned the plan, and won’t, not while your data is pure profit for them.
Hell with them, no more Windows PCs in my home. I’m sick to death of everyone and their mother trying to both advertise to me and sell my data without my permission and at zero benefit to me.
Do they really think we believe any of their lies? We don't control Windows, anti-libre software (it fails to include a libre software license text file, like AGPL). Dangerous! 🚩
I suspect Group Policy will be fully effective at disabling this, and there's a documented way to prevent it being installed and to remove it.
Imagine a massive corporation built on Risk Management, legal constructs and regulation, such as Wells Fargo, Capital One, CSC, Bank of America, etc, suing the pants off MS because this caused a leak of something, especially some data that's strictly regulated.
MS wouldn't stand a chance. Those places have ruthless legal organizations that know their world inside and out.
Browser history was implemented before companies massively abused privacy.
It was an honest feature for users.
We also learned a lot about security regarding password/credential extraction from browsers.
Windows Recall might be an honest feature. It might be super secure and really useful.
But Microsoft doesn't have the trust to pull this off
Exactly.
Actual security happens from the ground up. It's the first consideration of every step of every module of code that has any interaction with user data.
The fact that there was any version anywhere near shipping to anyone that resulted in an unsecured database being accessible to other programs tells you that it's not possible that it's secure.
Browser history also holds significantly less information than a screenshot of you using your computer taken every 3 seconds
This is why I use Firefox focus on my phone
No one is going to opt-in to having screenshots taken of their activities on the OS. If no one opts-in then it will hinder Microsoft's original plan of collection such data for copilot. Along comes the new marketing language to soften the approach and they still collect data.
No one would opt-in to having all of their personal files sent to the cloud. But Windows managed to get my father using OneDrive even though he had no idea what it was. He was absolutely pissed when I told him. Somehow that wasn't enough to get off of windows completely though.
*Windows won’t take screenshots of everything you do after all (that the company will admit to without you knowing)— unless you opt in
This is the best summary I could come up with:
Microsoft had originally planned to turn Recall on by default, but the company now says it will offer the ability to disable the controversial AI-powered feature during the setup process of new Copilot Plus PCs.
Recall uses local AI models to screenshot mostly everything you see or do on your computer and then give you the ability to search and retrieve anything in seconds.
Everything in Recall is designed to remain local and private on-device, so no data is used to train Microsoft’s AI models.
TotalRecall extracts the Recall database so you can easily view what text is stored and the screenshots that Microsoft’s feature has generated.
“In some cases, this will mean prioritizing security above other things we do, such as releasing new features or providing ongoing support for legacy systems.”
Davuluri references Microsoft’s SFI principles in today’s response, noting that the company is taking action to improve Recall security.
The original article contains 747 words, the summary contains 151 words. Saved 80%. I'm a bot and I'm open source!
This moves it from "actually fucking laughable" to "you should still run away from Windows fucking fast".
Their approach to security is still a trainwreck. Security cannot happen as an afterthought.
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
@lemmy.world
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
go to feed...
They will just enable it by default later when the heat passes. They always do. You no longer own Windows.
save