1017
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. (doublepulsar.com)
submitted 2 years ago by to c/technology@lemmy.world
212 comments fedilink hide all child comments
 

Q. Is this really as harmful as you think?

A. Go to your parents house, your grandparents house etc and look at their Windows PC, look at the installed software in the past year, and try to use the device. Run some antivirus scans. There’s no way this implementation doesn’t end in tears — there’s a reason there’s a trillion dollar security industry, and that most problems revolve around malware and endpoints.

you are viewing a single comment's thread
view the rest of the comments
[–] 31 points 2 years ago (13 children)

Can you elaborate on what "subpoenable information" means. Like I have a vague idea but im not super clear if thats like a legal term with special considerations or whatever. Elaboration would be helpful.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] 53 points 2 years ago (10 children)

    Not OP but the scenario described is say... A company and a specific manager gets sued for harassment. The plaintiff can be entitled to discovery related to the complaint, and that could now include the searchable screenshot database from the managers computer showing all the clear evidence that he harassed the plaintiff. Nightmare scenario for legal departments of companies.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 32 points 2 years ago (8 children)

    On the other hand, this makes it much easier for a corporation to spy on its employees, so I think at least some of them are in favor of this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 40 points 2 years ago (4 children)

    If employees are using the corporate's computers, they can already see everything the employees do, they don't need this new window feature to do it

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 2 years ago (3 children)

    That is by no means necessarily the case. For example, if a notebook is taken into the field and is not on the LAN.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 14 points 2 years ago

    A lot of companies are implementing better VPN tech (like SD-WAN, Nebula by Slack, etc), or at the least Microsoft Intune to ensure your corporate laptop is reachable anytime it's connected to the internet.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 2 years ago*

    Windows has some kind of built-in VPN feature that auto starts and will otherwise not give you any network access. Add on top of that some corporate firewall and you basically can't sneeze around your laptop without IT knowing.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 6 points 2 years ago (2 children)

    Hmmmm it depends... Are they going to make more money by spying on employees than they'll lose in lawsuits?

    I think COVID WFH policies proved the majority of us do not need someone breathing down our necks to perform

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 2 years ago

    If you're suspected of something and law enforcement can get a subpoena, you'll have to hand over the contents of your microsoft keylogger, actually microsoft will hand over your contents from their keylogger.

  • permalink
  • fedilink
  • source
  • parent