Microsoft Recall: AI That Keeps Tabs

Simple ideas can trick our minds. Imagine being able to recall every action you ever took on your computer. It would certainly help, wouldn’t it? Microsoft hopes to bring that idea to life. In practice, however, it is not so simple. Between privacy concerns and reports of malfunctions, Microsoft Recall, sometimes referred to as Windows Recall, quickly gained a bad reputation. But what is it exactly, and should you be afraid?

Recap of the Recall

Microsoft Recall was first introduced with Copilot+ PCs, a unique line of computers with integrated AI features thanks to NPU (Neural Processing Unit) chips. Recall was mentioned as a feature that will help you remember anything from a file to a website, as it has a photographic memory of your actions. Initially, any action taken, except if you are in private mode on the Edge browser specifically, gets screenshotted. Then, it gets analyzed with OCR (Optical Character Recognition), and the data is stored in a local database where the user can find the info they need later.

Former Microsoft threat intelligence analyst Kevin Beaumont was among the many who questioned Microsoft Recall. With his unique position, he described the whole idea as a mistake since it targeted a very tiny niche of users but was enabled by default. He also pointed out that, with the way it was implemented, you could steal someone’s entire history, including sensitive data like passwords, with two lines of code.

Developments

Microsoft Recall was changed from a feature that is enabled by default to an opt-in one after the controversies. It was also moved from being widely available to Copilot+ users to the Windows Insider Program, where select users could provide feedback to make Recall safer. An example is by implementing a filter that would prevent screenshotting sensitive data. Despite this, it still generates discussions to this day. Most recently, Tom’s Hardware pointed out that the sensitive information filter only works in some situations. They also explore how bad actors can easily bypass checks with remote programs like TeamViewer.

Microsoft Recall is not the monster the Internet made it out to be. It most likely won’t be pushed on you secretly in an update. Especially not on computers without an NPU chip. And it was not made so Microsoft can surveil your actions. But it is also not, as of yet, something I’d be comfortable recommending to everyone. It remains an ambitious idea, and I hope it will one day be perfected.

YouTube: Windows 11 24H2 Recall feature rolling out to Intel and AMD Copilot+PC compatible Insider PCs

Photo Credit: The feature image is symbolic and has been taken by JHVE Photo.
Sources: Kevin Beaumont (Double Pulsar) / Avram Piltch (Tom’s Hardware)