i will give you a likely scenario laptop user they do not lock their computer (this is disturbingly

i will give you a likely scenario
laptop user
they do not lock their computer (this is disturbingly common these days) and have no auto lock configured
recall is enabled by default (and they most likely do not know about it)

HHikariKnight i will give you a likely scenario laptop user they do not lock their computer (t...

Crono•6/1/24, 12:37 PM

Sure, but at that point you'll have access to the person's email, messaging accounts, likely work material, personal files and everything else the owner himself had access to. Not much to defend a computer without a password like that with physical access.

Crono•6/1/24, 12:39 PM

Malignant access to all of those is likely much more damaging than continuous screenshots.

Spenteacher•6/1/24, 12:46 PM

Spenteacher•6/1/24, 12:47 PM

Does anyone know why sunshine streams always the wrong monitors?

antheas•6/1/24, 12:47 PM

Recall is not released yet we do not know if it will be enabled by default

antheas•6/1/24, 12:47 PM

Most likely not since it will consume battery etc

antheas•6/1/24, 12:48 PM

We don't know specifics yet but imo the problem is that it might record stuff that it shouldn't

antheas•6/1/24, 12:48 PM

So it will be interesting to see how Ms deals with that

CCrono Sure, but at that point you'll have access to the person's email, messaging acco...

HikariKnightOP•6/1/24, 12:55 PM

yes but the point is that recall made it infinitely easier since it puts it all in 1 place

HHikariKnight i will give you a likely scenario laptop user they do not lock their computer (t...

Hunanbean•6/1/24, 12:55 PM

no worries, next step is MS insists on always on camera for facial recognition, 'for your safety'

HikariKnightOP•6/1/24, 12:56 PM

there is also the posibility of remotely tapping into recall without the user knowing it, but it will need to be released first to even be attempted

HHunanbean no worries, next step is MS insists on always on camera for facial recognition, ...

Crono•6/1/24, 12:56 PM

They already have Windows Hello

CCrono They already have Windows Hello

Hunanbean•6/1/24, 12:56 PM

indeed

CCrono Sure, but at that point you'll have access to the person's email, messaging acco...

potemkinhr•6/1/24, 1:04 PM

The issue might be quite a bit bigger. Some programs (er ex. banking sites) have their local executables encrypted but Recall effectively circumvents it. Even more, it gives context to actions, and even access to otherwise encrypted files by effectively OCRing what's on screen. From the initial reports I don't have much confidence they'll do it right off the bat and we may see big consequences because of that

potemkinhr•6/1/24, 1:06 PM

Don't forget this will also have access to information that might otherwise not be saved locally, as an example private cloud documents, chats or even RDP/SSH sessions

Crono•6/1/24, 1:08 PM

From where I stand, it doesn't seem to provide an attack surface that's much bigger than something like ShadowPlay.

potemkinhr•6/1/24, 1:09 PM

We'll see how it plays out when it's out, for me it's a bit too big pill to swallow

59smoke•6/1/24, 1:15 PM

I really dont get how MS gets away with this stuff when companies can be so secretive. I work in pharma and we had to come up with a code system to refer to our clients cause some of them didnt like that we had their names on binders and a competitor might see that during an audit. But we'll keep using windows even if its phoning home information and might be recording your whole desktop somewhere

59smoke•6/1/24, 1:15 PM

Like imagine how much more damage that does if someone stole you laptop and had your log in. They wouldnt have to look for anything. They could just ask copilot

559smoke I really dont get how MS gets away with this stuff when companies can be so secr...

potemkinhr•6/1/24, 1:16 PM

So we're in the same sector /wave
Not only binders, but in communication (Teams names, emails) and everything.

Ppotemkinhr So we're in the same sector /wave Not only binders, but in communication (Teams ...

59smoke•6/1/24, 1:17 PM

Fuck teams

559smoke Fuck teams

potemkinhr•6/1/24, 1:18 PM

Also fuck MS for enforcing a default expiration policy of 3 months for meeting recordings so they can save pennies in onedrive storage costs

DocMAX•6/1/24, 1:18 PM

how do i uninstall emudeck completly?

Ppotemkinhr Also fuck MS for enforcing a default expiration policy of 3 months for meeting r...

59smoke•6/1/24, 1:19 PM

Teams breaks our documents and they were like "we dont intend to fix it". So I have to bitch at people for using it

DDocMAX how do i uninstall emudeck completly?

59smoke•6/1/24, 1:19 PM

You may not be able to

59smoke•6/1/24, 1:20 PM

I'm under the impression you cant just remove something that's layered in. If you do it takes more space

59smoke•6/1/24, 1:20 PM

But you should be able to uninstall it enough so its just the installer

Ppotemkinhr The issue might be quite a bit bigger. Some programs (er ex. banking sites) have...

antheas•6/1/24, 1:23 PM

Protected applications on Android can signal to the OS that screen recording should be disabled

antheas•6/1/24, 1:23 PM

Should be like that in windows but I'm not a windows user

559smoke Teams breaks our documents and they were like "we dont intend to fix it". So I h...

potemkinhr•6/1/24, 1:23 PM

I can confirm it's actually a thing, had to make an investigation for a ticket. Combed through EXIF for documents and web apps (including teams) strips some data out when saving documents which are normally present when editing them in the desktop versions of the apps (namely comments and such collaboration features). When externals edited documents in web apps (because the E1 license doesn't provide them with a desktop version of the app) and sent them beack there were differences in the document and truthfully there's nothing you can do apart fom agreeing on using one version and sticking to it if you want consistency

antheas•6/1/24, 1:24 PM

In general android has state of the art security

Aantheas In general android has state of the art security

Crono•6/1/24, 1:25 PM

Bluetooth

antheas•6/1/24, 1:25 PM

I think it's very likely recall won't blindly record the screen but work per windoe

Hunanbean•6/1/24, 1:25 PM

basically, it will be how it always is. Pro version users can use GPEDIT to control it. Home version users will not be able to disable it. remember, with windows, You/Your Information are the payment.

CCrono Bluetooth

Crono•6/1/24, 1:26 PM

Also remember reading something about its VPN implementation being very vulnerable sometime ago

CCrono Bluetooth

antheas•6/1/24, 1:26 PM

At least it's protected by selinux

Ppotemkinhr I can confirm it's actually a thing, had to make an investigation for a ticket. ...

59smoke•6/1/24, 1:26 PM

Which I have to tell people and they don't like it cause it makes them have to do more editing work

antheas•6/1/24, 1:26 PM

So even if it's compromised you don't takeover the device

antheas•6/1/24, 1:26 PM

VPN implementation had a couple issues with dns leakage but that's not that much of a biggie

antheas•6/1/24, 1:27 PM

VPNs are a pain

potemkinhr•6/1/24, 1:28 PM

Will see what we'll get at work for new machines but don't think it'll fly wery well with our new CIO

Aantheas I think it's very likely recall won't blindly record the screen but work per win...

59smoke•6/1/24, 1:28 PM

I used to work for astrazenica. Their computer systems ran like dogshit cause all of their severs were located at their head quarters in Liverpool. They didnt want it to run off the azur cloud or something which would have worked better for people in other countries cause then all their proprietary data would be on MS servers

Its the hypocrisy of it

Mervius•6/1/24, 1:29 PM

wasn't there a post about vpns kinda just not working in general if your system supports DHCP option 121 ubder some circumstances

Mervius•6/1/24, 1:29 PM

Which Android seems to ignore that option

559smoke I used to work for astrazenica. Their computer systems ran like dogshit cause al...

potemkinhr•6/1/24, 1:31 PM

Most of the health providers host in Azure or Oracle, some on AWS and it's always jank. This will raise some big flags for them as it's out of their control and some data will leak this way inevitably, it's the reason why they pushed for cloud workspace in the first place and this negates it completely.

Hunanbean•6/1/24, 1:32 PM

if i try to user nvidia-settings to render higher res, then output to 1080 viewport, is that the same as DSR?

559smoke I used to work for astrazenica. Their computer systems ran like dogshit cause al...

antheas•6/1/24, 1:32 PM

Where's the hypocrisy

antheas•6/1/24, 1:32 PM

Data governance is what it is

59smoke•6/1/24, 1:32 PM

We trust ms on the desktop but not the server

Mervius•6/1/24, 1:33 PM

If you actually cared about your data you probably wouldn't be using windows

i will give you a likely scenario laptop user they do not lock their computer (this is disturbingly

Similar Threads

Similar Threads

Similar Threads