1017
Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. (doublepulsar.com)
submitted 2 years ago by to c/technology@lemmy.world
212 comments fedilink hide all child comments
 

Q. Is this really as harmful as you think?

A. Go to your parents house, your grandparents house etc and look at their Windows PC, look at the installed software in the past year, and try to use the device. Run some antivirus scans. There’s no way this implementation doesn’t end in tears — there’s a reason there’s a trillion dollar security industry, and that most problems revolve around malware and endpoints.

you are viewing a single comment's thread
view the rest of the comments
[–] 28 points 2 years ago* (8 children)

I cant believe they are including this in enterprise edition too.

They usually keep their dirty spyware out of the enterprise editions to avoid losing corporate clients who dont want their secrets easily pluckable.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 11 points 2 years ago (2 children)

    My hospital will be freaking the fuck out about this right… about…. Now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago* (2 children)

    Ask yourself what this feature is actually useful for. Ignore the concerns of privacy just what can this really do.

    Its not really needed for copilot, if it wanted to capture what you were doing it would directly update the internal model, no reason for the slide show of your action.

    No besides wasteing disk space this is for:

    1. Gaming youtubers to get a screen shot of something when they were not recording
    2. Some screen shots of history when searching not better than the file/website preview really
    3. Tracking and logging what the end user is doing so when audited by the manager/it they can use it as proof you are not doing it right/are inefficient /should ve fired

    By all means a company can disable this in policy im sure, but its for the enterprise not the end user. (and yes stored locally, but if you delete the laptop when they want to inspect it that likely is all the excuse they need)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Benefit to my org is getting billers to look for untracked time, which would equate to some percentages of revenue increase in my opinion.

    Just need to balance it with security concerns..

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •