Skip to main content

Total Recall Reloaded


I would like to draw your attention to the discussions about the planned Windows Recall functionality. 

Who remembers the movie Total Recall, which attracted many people to the cinemas in 1990? It starred Arnold Schwarzenegger and Sharon Stone, among others. And now comes the “sequel” with Windows Recall

Windows Recall is intended to make user activity on Copilot+ PCs searchable. This will involve Windows saving snapshots of your screen at regular intervals. You can quickly search through your snapshots to find things on your Copilot+ PC. For example, content that you have seen in applications, websites, images and documents. Recall does not record audio data and does not store continuous video.

Further informationon privacy control and management.

Soon, a new class of devices with ARM CPUs and a special AI chip will be launched on the market that will support this function. A few resourceful minds have also found ways to run this function on non supported devices. The data that Recall generates ends up in the Windows user profile folder under AppData:

C:\Users\<username>\AppData\Local\CoreAIPlatform.00\UKP\{GUID}

There is a subfolder with a GUID containing an SQLite3!! database and a subfolder called ImageStore, which contains the screenshots (JPEG format). The database and screenshots are accessible to all users who are in the administrators group, no encryption, nothing. A Python script is already available on GitHub that saves and analyzes the data contained in the database.  This makes it easy to check via the command line whether a certain word appears in the data. All you need here is “creativity” to .....you know what could be made with it.

Let's see how this develops. There are already many reports and discussions on the well-known web portals.

Addendum: It is possible to access the data without administrator rights!

Not sure what MS was thinking in doing this… 🤦🏻‍♂️


Why?  That is the question that comes to mind. In these days of ransomware and attacks do we really need this too. I am sure there are going to be those that figure out how to disable or turn it off so let's hope they do.  This should be an opt-in thing and not turned on by default. 🙄


That's unbelievable. Making the work of people with bad intentions easier, exposing us even more to current threats.😣


Update

Microsoft announced that this function will be turned off by default.


Update

Microsoft announced that this function will be turned off by default.

I am glad they came to their senses on this one.


Their senses should have suggested to not develop this thing at all… 😉


Their senses should have suggested to not develop this thing at all… 😉

That I agree with as well what for?  😂 


Comment