Microsoft's AI Secretly Copying All Your Private Messages (futurism.com)
from schizoidman@lemm.ee to technology@lemmy.world on 29 Apr 11:05
https://lemm.ee/post/62673770

#technology

threaded - newest

nyahlathotep@sh.itjust.works on 29 Apr 11:26 next collapse

woah, what, i can’t believe it

Valmond@lemmy.world on 29 Apr 12:06 collapse

Shocked!

n3cr0@lemmy.world on 29 Apr 11:44 next collapse

They say you can disable Recall by keep pornhub videos running in foreground.

PlasticExistence@lemmy.world on 29 Apr 11:45 next collapse

Sorry, boss, but this girl-on-girl playlist is to protect our sensitive data from Microsoft

Zwuzelmaus@feddit.org on 29 Apr 11:48 next collapse

LMAO!!

tischbier@feddit.org on 29 Apr 11:57 next collapse

In 1998, who could have predicted that in 2025, users would be the lords of porn pop-ups?

Forcing the Eye of Microsoft to gaze my mommy milker daddy dwarf bangers is truly the quintessential example of that which is nameless in the Tao.

Ledericas@lemm.ee on 30 Apr 02:06 collapse

pornado,

SaharaMaleikuhm@feddit.org on 30 Apr 04:18 collapse

Damn, what’s the opposite of 1984?

CosmicTurtle0@lemmy.dbzer0.com on 29 Apr 13:41 next collapse

Have Frozen running in the foreground. I’m half tempted to install Windows on a VM and just have Frozen running on a loop.

Make Disney and Microsoft fight it out in court.

ayyy@sh.itjust.works on 30 Apr 05:53 collapse

The coldcopyright never bothered me anyways.

—Microsoft

Wooki@lemmy.world on 30 Apr 01:34 next collapse

You can also disable Recall by using a Linux distro

Ledericas@lemm.ee on 30 Apr 02:06 collapse

be more malicious run PH and various porn sites.

grapple1298@lemy.lol on 29 Apr 11:52 next collapse

We already know this. It’s not just Microsoft; Google, Meta, and other big tech companies are also involved in similar practices.

pelespirit@sh.itjust.works on 29 Apr 15:39 next collapse

Apple too, right?

Retro_unlimited@lemmy.world on 29 Apr 15:45 next collapse

For all we know, Linux could be just as compromised…

Terminarchs@slrpnk.net on 29 Apr 18:30 next collapse

Ah yes, to generate profit for the Linux™ shareholders.

Retro_unlimited@lemmy.world on 29 Apr 21:19 collapse

I was reading how the us gov tried to plant something in an update.

Moose@moose.best on 29 Apr 20:07 next collapse

I mean, but we pretty much do know? The difference between Linux and Windows / MacOS is Linux is open source and can be checked and audited by anyone. If an exploit exists, it will be visible publicly and just needs to be spotted by those knowledgeable enough. Windows and MacOS are more than likely audited too but by private companies under NDA, so then it’s left up to Microsoft or Apple to decide what exploits are fixed.

Retro_unlimited@lemmy.world on 29 Apr 21:21 collapse

I agree completely that open source can be audited by anyone, but I did read something tried to be sneaked into an update, and you never really know, software is complicated and maybe some roundabout way to have an exploit using code that looks like it’s intent was something different.

Moose@moose.best on 29 Apr 22:55 collapse

Ah yes, I think that was when a FOSS maintainer had to step down and handed it off to someone else if I remember right? See this XKCD for relevance. It’s pretty ridiculous how much we (and companies with billion dollar revenues) rely on the free work of others for such important systems. But yes, an important distinction to make is that certain Linux distributions may use code by others that is not open source and malicious without them realizing.

FartsWithAnAccent@fedia.io on 29 Apr 21:45 collapse

If only there was a way to review the code...

grapple1298@lemy.lol on 29 Apr 16:34 collapse

Yeah

ripcord@lemmy.world on 29 Apr 21:01 collapse

Do you have a source?

grapple1298@lemy.lol on 30 Apr 00:36 collapse

Just read their privacy policy and tos.

Ledericas@lemm.ee on 30 Apr 02:07 collapse

google has on various phones, a app that records your phone, but you can delete it. google also uses vcaptcha V3 which they lent the technology to REDDIT as well.

MoonlightFox@lemmy.world on 29 Apr 12:34 next collapse

<img alt="" src="https://lemmy.world/pictrs/image/42072f80-410d-4f9e-b30c-4f9570b98f0a.png">

littlewonder@lemmy.world on 30 Apr 02:40 collapse

This is the highest-quality, shocked Pikachu I’ve ever seen.

RogueBanana@lemmy.zip on 30 Apr 04:02 collapse

Higher resolution but looks worse imo. Someone probably threw it in illustrator, used that auto vector tool or whatever and exported as high res without fixing the lines.

zqps@sh.itjust.works on 01 May 10:55 collapse

Or just used an auto-upscaler.

melsaskca@lemmy.ca on 29 Apr 12:39 next collapse

Moral blackmail and shaming will be the new industries of the future!

rottingleaf@lemmy.world on 29 Apr 12:56 next collapse

Makes sense why they want this technology so much, one thing has really been achieved - in year 2005 you couldn’t make a program that would be a keylogger and a useful thing all in one, so you had to make a keylogger somehow detect those rare events one can risk it running, or something like that. You couldn’t instruct it in English “send me his private messages on sites like Facebook”, you had to be specific and solve problems. Now you can. And these “AI”'s are usually one program with generic purpose. To stuff everything together with kinda useful things.

floofloof@lemmy.ca on 29 Apr 12:58 next collapse

Well at least there are all kinds of checks and balances to prevent big tech and the US Government from abusing this information, right? Thank goodness we have no reason to worry about it being used for political surveillance and identifying who to send to foreign concentration camps, or anything like that.

ColdWater@lemmy.ca on 29 Apr 14:07 next collapse

No shit?

reksas@sopuli.xyz on 29 Apr 15:09 collapse

to vast majority of people this is unthinkable. They will also likely just not even notice news like this because they dont pay attention to such things and likely dont even care about their personal info until something bad happens to them because of that.

fluffykittycat@slrpnk.net on 29 Apr 17:02 collapse

Stealing this info and posting it publicly is an important way to fight back. Once prole hear their credit card is being defrauded because of recall it will be untenable for it to stay

Septimaeus@infosec.pub on 29 Apr 14:15 next collapse

Just a tip: if you must use consumer editions of Windows regularly, consider adding an automatic provisioning tool like AME to your workflow.

The example above uses customizable “playbooks” to provision a system the way docker compose would a container image, so it can fill the role of a VM snapshot or PXE in non-virtualized local-only scenarios.

The most popular playbooks strip out AI components and services (there are many more than just Recall) but also disable all telemetry and cloud-based features, replace MS bloatware with preferred OSS, curtail a truckload of annoying Windows behaviors, setup more sensible group policies than the defaults, and so forth.

I have a few custom playbooks for recurring use cases so that, when one presents, I can spin up an instance quickly without the usual hassle and risk.

boatswain@infosec.pub on 29 Apr 14:40 next collapse

This looks like useful stuff; thanks for sharing. I’m not on Windows myself any more, but this looks like info with passing on to those in my life who are.

JTheFox@lemmy.world on 29 Apr 15:28 next collapse

This is really interesting! I’ve usually installed Winaero Tweaker back when I still used Windows, if I knew this existed I probably would’ve gone with this instead. Having access to “playbooks” would be quite handy.

spicehoarder@lemm.ee on 29 Apr 17:05 next collapse

/give lemmy_gold

arakhis_@feddit.org on 29 Apr 18:13 next collapse

You for sure feels so good being this helpful. But TIN really don’t understand SHT if you use so many Technical terms(TT)

But there’s a solution in brackets I just presented, that’s commonly accepted in academia if you still want to use TT like that

Septimaeus@infosec.pub on 29 Apr 23:47 collapse

Forgive me for not explaining better. Here are the terms potentially needing explanation.

  • Provisioning in this case is initial system setup, the kind of stuff you would do manually after a fresh install, but usually implies a regimented and repeatable process.
  • Virtual Machine (VM) snapshots are like a save state in a game, and are often used to reset a virtual machine to a particular known-working condition.
  • Preboot Execution Environment (PXE, aka ‘network boot’) is a network adapter feature that lets you boot a physical machine from a hosted network image rather than the usual installation on locally attached storage. It’s probably tucked away in your BIOS settings, but many computers have the feature since it’s a common requirement in commercial deployments. As with the VM snapshot described above, a PXE image is typically a known-working state that resets on each boot.
  • Non-virtualized means not using hardware virtualization, and I meant specifically not running inside a virtual machine.
  • Local-only means without a network or just not booting from a network-hosted image.
  • Telemetry refers to the data harvesting apparatus. Most software has it. Windows has a lot. Telemetry isn’t necessarily bad but it is easily abused by data-hungry corporations like MS, so disabling it is a precaution.
  • MS = Microsoft
  • OSS = Open Source Software
  • Group policies are administrative settings in Windows that control standards (for stuff like security, power management, licensing, software and file system access, etc.) for user groups on a machine or network. Most users stick with the defaults but you can edit these yourself for a greater degree of control.
  • Docker lets you run software inside “containers” to isolate them from the rest of the environment, exposing only what they need to run, and Compose is a related tool for defining one or more of these containers, the resources they need, how they interact, etc. To my knowledge the only equivalent for Windows to date is Wine and its successors like Proton.

Many of these concepts are IT-related, as are the use-cases I had in mind, but the software is simple to use if you pick one of the premade playbooks. (The AtlasOS playbook is popular among gamers, for example.)

Edit: added docker

BearGun@ttrpg.network on 29 Apr 22:07 next collapse

consider adding an automatic provisioning tool like AME to your workflow.

The example above uses customizable “playbooks” to provision a system the way docker compose would a container image, so it can fill the role of a VM snapshot or PXE in non-virtualized local-only scenarios.

I know what most of these words mean individually

spooky2092@lemmy.blahaj.zone on 30 Apr 01:47 collapse

Basically, a playbook is a set of instructions or baselines for how you want the system to look/be setup, and the provisioning tool will engage in however many tasks are required to configure the system to your specifications. I played around with something similar with PowerShell DSC, and its pretty cool to be able to eliminate config drift when it checks against the config and remediates any changes that weren’t updated in the playbook.

BearGun@ttrpg.network on 30 Apr 11:13 next collapse

I see, that clears things up somewhat. Thank you!

demonsword@lemmy.world on 30 Apr 12:22 collapse

Basically, a playbook is a set of instructions or baselines for how you want the system to look/be setup, and the provisioning tool will engage in however many tasks are required to configure the system to your specifications.

so… ansible?

SaharaMaleikuhm@feddit.org on 30 Apr 04:16 collapse

We did not take the easy path of writing our app in Java or a web-based Java-script heavy framework. Using C# and .NET allows us to craft an experience that minimizes resource use and is very fast.

This got me good. I just love how they try to make using .NET for making a windows application “not the easy path”.

Sounds kinda interesting though. If I’m ever so unlucky as to having to use Win11, I will give it a try.

Septimaeus@infosec.pub on 30 Apr 04:58 next collapse

Lol I noticed the same. They evidently have some ongoing internal disagreement as to their target audience. Docs and functionality says “our audience is enterprise developers” but their marketing definitely says “our audience is end users.”

It may be explained by recent partnerships with former custom ISO devs (seeking legitimacy and offering a sizable user base in turn). I expect the plan is eventually to sell premium support for an enterprise toolset, but for now their target audience is the non-dev-but-tech-savvy end user. And those happen to be surprisingly opinionated re: java and electron.

zqps@sh.itjust.works on 01 May 10:27 collapse

I guess it is nowadays compared to PWAs.

minorkeys@lemmy.world on 29 Apr 15:22 next collapse

How is this possibly going to be tolerated in business environments?

martinb@lemmy.sdf.org on 29 Apr 15:33 next collapse

They pay more for it not being switched on… Or it doesn’t call out to home

ripcord@lemmy.world on 29 Apr 20:57 next collapse

I would guess my company absolutely wants it, but wants the I fo sent only to them.

In fact if they didn’t already have something like this installed on our PCs I’d be floored.

ArtVandelay@lemmy.world on 30 Apr 00:41 collapse

“pay us money to not do something” sounds like some mob shit

Jaysyn@lemmy.world on 29 Apr 15:44 next collapse

My company is still on Windows 10 LT or whatever.

Mihies@programming.dev on 29 Apr 18:13 collapse

So, pay more it is.

tauren@lemm.ee on 01 May 10:38 collapse

In business environments this can help employers spy on their employees. That’s how, I guess.

Broken_Washer@lemmynsfw.com on 29 Apr 17:12 next collapse

This is top tier comedy: Microsoft won the PC war to be benevolent and give it to Linux. How kind of them to shoot themselves in the foot for the good of mankind.

lennivelkant@discuss.tchncs.de on 01 May 06:24 collapse

They didn’t fully hand it to Linux yet. We still have to earn that. Ideological appeal / privacy concern alone isn’t enough for many people if the jump seems too scary, particularly if it feels like a one-directional leap of faith. What if they don’t like it on the other side? Better the devil you know…

We need to build bridges, in both directions: help and encourage people to switch to Linux, but also promise them help to get back, basically an “out” if they don’t like it. I see plenty of guides for migrating to Linux, but how about getting back to Windows?

It’s okay not to like Linux, it’s okay to be scared or apprehensive, and it’s okay to get cold feet and return to the familiar. Maybe some time in the future they’ll try again.

Hastur@lemmy.ca on 29 Apr 21:08 next collapse

everywhere is copying your private messages. Google, facebook, microsoft, reddit, your phone texts, anything you’ve ever posted anywhere. This isn’t news

Krompus@lemmy.world on 29 Apr 22:05 next collapse

🐧 lol

uncouthterran@reddthat.com on 29 Apr 23:25 next collapse

So we should be okay with it? What’s your point?

grue@lemmy.world on 30 Apr 00:09 next collapse

The general public isn’t fully aware of the negative implications of it yet. That means it is news.

easily3667@lemmus.org on 30 Apr 00:33 collapse

Sure they are, they will just say they don’t care

SaharaMaleikuhm@feddit.org on 30 Apr 04:22 collapse

Ahh the good ol roll over and die tactic. Americans never fail to lick a companies boots.

[deleted] on 30 Apr 01:31 next collapse

.

equivocal@lemm.ee on 30 Apr 02:05 next collapse

It only works if you have an ARM CPU with an NPU.

No, it works on x86-64 assuming the device has a sufficient NPU. Both AMD and Intel CPUs latest CPUs list the Recall preview as available now.

Psythik@lemm.ee on 30 Apr 02:36 collapse

And how many people have the latest CPU? Most Lemmy users don’t even have an HDR monitor—tech that’s been mainstream for over a decade at this point—let alone the latest and greatest processor.

SaharaMaleikuhm@feddit.org on 30 Apr 04:03 collapse

So it’s just a matter of time then? When can we complain? A year from now? Two years? Do we have to wait for the next garbage thing Microsoft does? Hey, why don’t you just tell us exactly when it’s okay for us to complain? We bow to you oh great one. We live by your command.

Psythik@lemm.ee on 30 Apr 04:11 collapse

About time someone recognized my authority; thank you.

Let’s wait until the average user has an NPU before we start complaining again, okay? If that doesn’t work for everyone, let’s have a meeting in my palace tomorrow afternoon to decide on a date, and if I’m in a good mood, I’ll allow it.

suodrazah@lemmy.world on 30 Apr 04:25 collapse

Wait for them build it before you complain? Wild take.

Psythik@lemm.ee on 30 Apr 04:27 collapse

Don’t argue with me or it’s straight to the Gulag for you

pineapplelover@lemm.ee on 30 Apr 03:03 next collapse

First they came for the ARM CPU users type mentality

Psythik@lemm.ee on 30 Apr 03:55 collapse

*sigh* you’re not wrong but the constant posts are annoying.

FreedomAdvocate@lemmy.net.au on 30 Apr 04:00 next collapse

Not to mention it’s optional, entirely on device, and secure.

Let’s be honest, most of Lemmy users complaining about it are on Linux or a Chromebook anyway. They can’t use it even if they wanted to.

Dragod@lemmy.world on 30 Apr 04:09 next collapse

Well, if they say it’s secure, it must be secure!

lmuel@sopuli.xyz on 30 Apr 04:15 collapse

Chromebook? Lmao

PetteriPano@lemmy.world on 30 Apr 04:43 collapse

We run Linux on them because they’re cheap and disposable.

suodrazah@lemmy.world on 30 Apr 06:05 collapse

Disposable? Gross.

PetteriPano@lemmy.world on 01 May 04:20 collapse

You use the same computer every day? Now that’s unhygienic.

moonburster@lemmy.world on 30 Apr 05:09 collapse

I get that it is annoying for you since you obviously don’t have a pc that will run it, yet.

But a lot of problems in tech started because it was just there and didn’t do that much yet. Lots of governments are still catching up to the big tech to stop them from having too much power, because they slept on it.

I dislike the recall stuff too, I don’t have a pc that will be able to run it and probably won’t have one for the coming 10 years, unless there is a huge leap in performance. But I do appreciate all the people here making their voices heard and actually bending MS their knee as well.

So please filter it and get out of the way of the nice people, thank you

yarr@feddit.nl on 30 Apr 04:20 next collapse

That AI is going to be copying a lot of “I put on my robe and wizard hat”

Treczoks@lemmy.world on 01 May 08:37 next collapse

Not mine. There are a lot of reasons not to use Windows, and this is just one of them.

simop_jo@lemm.ee on 01 May 10:09 next collapse

WHAAAT? I would NEVER expect that from a company so good that cares about me and my data. They even tell me that in the perfect operating system! Windows! I just love bloat and ads and ai everywhere on my 150$ piece of software!!!

themachinestops@lemmy.dbzer0.com on 01 May 10:20 next collapse

I am shocked, shocked I tell you.

MP3Martin@programming.dev on 01 May 10:59 collapse

Why would you want to use that as a user. Like what is it for