privacy nightmare Archives

Winsage

December 1, 2025

Microsoft says AI agents are “risky”, but it’s moving ahead with the plan on Windows 11

Microsoft is integrating AI agents into Windows 11, despite acknowledging risks such as hallucinations, unpredictable behavior, and vulnerabilities to cyber threats like Cross Prompt Injection (XPIA). The company plans to transform every Windows 11 PC into an AI-powered machine by introducing features like Copilot Voice, Copilot Vision, and Copilot Actions. The Windows 11 taskbar will feature a new "Ask Copilot" interface for users to interact with AI agents. These agents will operate under separate accounts with limited permissions, controlled folder access, and tamper-evident logs, but still have access to personal folders like Documents and Downloads. The Agent Workspace is a key feature that allows AI agents to perform tasks in a controlled environment, separate from the user's session. Agents can interact with applications and execute multi-step tasks while being monitored. Microsoft employs the Model Context Protocol (MCP) to regulate agent interactions with applications, ensuring security and proper permissions. Despite concerns over privacy and security, Microsoft believes that integrating AI is essential for keeping Windows competitive. The company has faced backlash over previous features like Recall, which raised privacy issues, and must work to rebuild trust with users. The experimental AI features are currently optional, and Microsoft aims to demonstrate their value to encourage acceptance.

Winsage

May 22, 2025

Signal now blocks Microsoft Recall screenshots on Windows 11

Signal has introduced a "screen security" feature in its Windows application to enhance user privacy by preventing Microsoft's AI-driven Recall functionality from capturing content displayed within the app. This feature is active by default on all Windows 11 devices and sets a Digital Rights Management (DRM) flag on Signal's app windows. Recall, launched in May 2024, captures screenshots of active windows and has raised privacy concerns, leading Microsoft to make it optional and implement various security enhancements. Users can disable Signal's screen security but will be warned about potential privacy risks. Signal's developer, Joshua Lund, highlighted ongoing concerns regarding privacy in applications like Signal and called for a balance between privacy and accessibility in AI technologies.

Winsage

April 12, 2025

Microsoft starts final Windows Recall testing before rollout

Microsoft is gradually introducing its AI-powered Windows Recall feature to Insiders in the Release Preview channel, with plans to extend it to all Windows users with Copilot+ PCs. Recall captures screenshots of active windows at regular intervals, allowing Windows 11 users to search for text within these snapshots using natural language. Users can opt-in to save snapshots and must authenticate via Windows Hello to access their data. Recall is currently being rolled out to Windows 11 Insiders with Build 26100.3902 (KB5055627). The feature faced privacy concerns upon its introduction in May 2024, leading Microsoft to implement measures to enhance user privacy, such as filtering out sensitive information and allowing users to adjust storage settings. The rollout of the first Recall preview began in November 2024 for Snapdragon Copilot+ PCs, followed by Intel and AMD Copilot+ PCs a month later.

Winsage

April 11, 2025

Copilot Recall: Microsoft rolls out AI screenshot tool

Microsoft has rolled out its AI-driven tool, Copilot+ Recall, which captures snapshots of users' screens at regular intervals. Currently in preview mode, it is available to select users of Microsoft's AI-enabled PCs and laptops, following a temporary halt in 2024 for refinement. Access is being expanded to participants in the Windows Insider program, with global availability planned, though users in the EU will experience a delay until late 2025. Recall allows users to search through past activities, and they can opt-in to the feature, pausing snapshot saving at any time. Privacy advocates have raised concerns about potential misuse, as the tool can save images from emails and messaging apps, including private messages. Microsoft asserts that snapshots are not shared with the company or third parties and are stored locally on users' devices. Users can choose which applications can use Recall, and private browsing modes will not be subject to snapshotting. The UK's Information Commissioner's Office is engaging with Microsoft to ensure compliance with data protection laws.

Winsage

December 13, 2024

Surprise! The “new and improved” Microsoft Recall is still a privacy nightmare

Microsoft's Recall feature is under scrutiny for continuing to collect sensitive information, such as credit card and social security numbers, despite a setting intended to prevent this data harvesting. Reports indicate that Recall captures private data even when users attempt to disable this functionality. Demonstrations show that Recall recorded sensitive information from various applications, including a Notepad window and a loan application PDF, despite the presence of privacy controls. Additionally, Recall appears to rely on contextual cues from websites, successfully capturing data from a self-created site while refraining from recording information on legitimate payment platforms.

Winsage

October 31, 2024

Microsoft delays Windows Recall again, now by December

Microsoft has postponed the launch of its AI-driven Windows Recall feature, which was initially set for rollout to Insiders with Copilot+ PCs in October. The delay is due to customer feedback requesting improved data privacy and security measures. The feature is now expected to be available for preview by December. Recall captures screenshots of active windows at regular intervals and uses an AI model to analyze these images, storing the data in an SQLite database. Windows 11 users will be able to search this information using natural language queries. Users will need to opt-in to enable Recall and confirm their presence through Windows Hello. Recall can be uninstalled, filters out sensitive content, and allows users to exclude specific applications or browsing sessions. It will also include malware protection features.

Winsage

September 28, 2024

Microsoft has some thoughts about Windows Recall security

Microsoft has revised its Recall feature for Copilot+ PCs, focusing on security. Recall captures snapshots of the Windows desktop, documenting application usage for future retrieval. Initially announced at Microsoft Build 2024, it faced criticism for privacy concerns, leading to a postponed rollout. By August, Microsoft announced adjustments and planned to release it to Windows Insiders in October. Recall is an opt-in feature, allowing users to enable or disable it, and it encrypts data stored locally on the device. Access requires Windows Hello Enhanced Sign-in Security, and users can delete snapshots or pause the feature anytime. Recall does not record private browsing sessions and allows users to exclude specific apps and websites. A sensitive content filter prevents capturing of passwords and sensitive information. Users can control content retention duration and storage allocation.

Winsage

September 28, 2024

Microsoft to re-launch ‘privacy nightmare’ AI screenshot tool

Microsoft plans to reintroduce its tool, Recall, in November 2024, after delaying its release due to privacy concerns. Recall will now operate on an opt-in basis, a change from the original version that was to be enabled by default, following inquiries from the UK's Information Commissioner's Office regarding its data collection capabilities. The tool is designed to help users access past activities on their PCs by capturing desktop screenshots at regular intervals. Microsoft has implemented additional security measures, ensuring that all snapshots and associated information will be encrypted, and access to screenshots will require biometric login. Recall will be exclusive to the CoPilot+ range of laptops, which have advanced AI chips. Cybersecurity expert Professor Alan Woodward has acknowledged the improvements but emphasizes the need for thorough testing of its security and privacy aspects before deployment.

Winsage

September 28, 2024

Microsoft announces sweeping changes to controversial Recall feature for Windows 11 Copilot+ PCs

Microsoft's Recall feature, designed for Copilot+ PCs running Windows 11, aims to provide an AI-driven "photographic memory" to help users manage information overload. Due to privacy and security concerns, Microsoft halted the initial preview and redesigned the feature, which will now only activate if the system drive is encrypted and a Trusted Platform Module (TPM version 2.0) is enabled. Recall will be opt-in, allowing users to choose whether to enable or disable snapshot saving during setup. Users can also remove Recall from OEM and retail versions of Windows 11, while Enterprise users will need to deploy it separately. New privacy settings will notify users when snapshots are saved and allow them to pause the feature or exclude certain content. Recall is designed to filter out sensitive information and requires biometric authentication for access. Microsoft has conducted multiple security reviews and testing to ensure the feature's safety and has committed to bug bounties for serious security issues.

Winsage

August 23, 2024

As Microsoft breaks awkward silence around its controversial Recall feature, privacy questions remain

Microsoft's Recall feature, initially set to launch with Copilot+ PCs on June 18, faced privacy concerns leading to its suspension. The launch was delayed, and it was made available only to Windows Insiders starting in October. Security experts have raised questions about the feature's appeal to casual users and its potential data collection implications, particularly regarding sensitive information. The full release of Recall may not occur until 2025 due to the holiday season slowdown in development. Key questions remain about user transparency, protection of sensitive applications, and authentication measures for accessing Recall's database.