desktop processors

Microsoft is revisiting its Recall feature for Copilot+ on Windows PCs after facing backlash over security issues during its initial rollout. The original Recall captured screenshots and text using optical character recognition (OCR) and stored this data unencrypted, raising security concerns. The feature was postponed before its planned launch on June 18 to address these issues. The revised Recall will be opt-in by default, requiring user activation, and will necessitate re-authentication through Windows Hello to access data. All locally stored Recall data will be encrypted, with encryption keys stored in the device's Trusted Platform Module (TPM). Recall will only function when BitLocker or Device Encryption is enabled, along with Virtualization-Based Security (VBS) and Hypervisor-Protected Code Integrity (HVCI). Recall will operate within a VBS enclave, isolating data in memory and allowing access only after user permission. Only Microsoft-signed code can execute within these enclaves, enhancing security against malware. Users must re-authenticate with Windows Hello each time they access Recall, with biometric authentication as the primary method. The encryption keys are tied to the user's identity, addressing vulnerabilities from the original version. Users can configure settings to limit data collection, manage disk space, and filter sensitive content. Recall will only be available on new PCs meeting specific requirements, including at least 16GB of RAM, 256GB of storage, and a compatible neural processing unit (NPU). Eligible devices include select Arm Windows PCs with Snapdragon chips and x86 PCs with Intel's Core Ultra or AMD's Ryzen AI processors. Microsoft has not provided a timeline for the reintroduction of Recall but indicated it would roll out to Windows Insiders in October.