When Microsoft introduced its AI-driven feature, Windows Recall, earlier this year, it anticipated a wave of enthusiasm from users. The concept was straightforward: to provide users with AI-enhanced access to their past activities on Windows PCs. By capturing a screenshot every five seconds, Recall aimed to process and present this data interactively through natural language. However, the initial reception was far from positive.
Privacy and security advocates quickly voiced their concerns regarding several aspects of Recall:
- The feature was set to run automatically after installation, making it opt-out rather than opt-in.
- Data security during runtime was not adequately addressed.
In response to the backlash, Microsoft promptly retracted Recall and committed to making improvements. Recently, the company shared a blog post on the Windows Experience blog detailing the modifications made to the feature.
Recall: the security and privacy changes
To address the criticisms, Microsoft has implemented significant changes. Firstly, Recall will now be an opt-in feature, allowing users to decide whether to activate it during the out-of-box experience or at a later time. For those who prefer not to engage with Recall, it can now be uninstalled, contrary to earlier statements suggesting this would not be possible.
In terms of security enhancements, Microsoft has taken steps to encrypt Recall’s database and run essential processes in an isolated environment, thereby preventing malware from accessing data during runtime. Additionally, Windows Hello will be necessary for certain actions, with prompts appearing when users attempt to modify Recall’s settings or access its interface. The introduction of rate-limiting and anti-hammering measures further fortifies the system against potential malware attacks.
Windows Recall: Privacy Controls overview
The blog post outlines several user controls over Recall, many of which were not previously available:
Here is the overview:
- Users can manage the disk space allocated to Recall and determine the duration for which activity data is retained.
- Options exist to delete data from specific time ranges, individual apps, or websites, as well as any data retrieved during searches.
- Private browsing data will not be saved in Edge, Chrome, Firefox, Opera, or other Chromium-based browsers.
- Website activity can be blocked in Edge, Chrome, Firefox, and Opera.
- A system tray icon will indicate activity and provide access to Recall.
- Recall includes sensitive content filtering through Microsoft’s Purview information protection product.
Closing Words
The adjustments made to Recall directly address two critical points of contention: the opt-out nature of the feature and the inadequacies in data security. While some uncertainties remain regarding the implementation process, the shift to an opt-in model significantly reduces the likelihood of the feature operating unnoticed in the background.
What is your take on the announced changes? Is it enough? Would you give Recall a try now, or is it still not something that you are interested in? Feel free to leave a comment down below.
