The HIPAA concerns are very alarming. And I agree with the spirit if the article. However, I’m not sure the article is correct when it says Recall cannot be disabled. I’ve already seen other articles telling you how to turn it off. The fact that it’s opt-out and not opt-in is a huge issue, though.
Actually it is more than a local problem. Since Recall shipped with opt-out, means every computer will have this enabled. Even if you truned it off, the computer on the other end may still capture your data.
Say you said something here, regret about and delete it, but right before a user have Recall enabled see it and can just dig out your now deleted comment. Not good. This applies to HIPAA data or not.
This is essentailly a local search engine that index everything you see and others said in near real time, without repecting robots.txt.
Yes, that is also a big problem. In general you should be very aware in online meetings / screen sharing to be very cautious and deliberate with what you show. That problem has burned a streamer or two. :) Having a boring vanilla “work machine” for that sort of thing is always a good idea. Windows Recall definitely makes this problem worse! You could be doing 100% legit professional ‘work stuff’ and it could still grab things that it shouldn’t (HIPAA and many other potentially sensitive bits of corporate data).
If you disable it, make sure to check on it regularly, as MS loves to turn things back on “for you” after Windows updates run. I’ve already seen some sysadmins saying they will run a scheduled task to make sure it stays dead.
The HIPAA concerns are very alarming. And I agree with the spirit if the article. However, I’m not sure the article is correct when it says Recall cannot be disabled. I’ve already seen other articles telling you how to turn it off. The fact that it’s opt-out and not opt-in is a huge issue, though.
Actually it is more than a local problem. Since Recall shipped with opt-out, means every computer will have this enabled. Even if you truned it off, the computer on the other end may still capture your data.
Say you said something here, regret about and delete it, but right before a user have Recall enabled see it and can just dig out your now deleted comment. Not good. This applies to HIPAA data or not.
This is essentailly a local search engine that index everything you see and others said in near real time, without repecting
robots.txt.Yes, that is also a big problem. In general you should be very aware in online meetings / screen sharing to be very cautious and deliberate with what you show. That problem has burned a streamer or two. :) Having a boring vanilla “work machine” for that sort of thing is always a good idea. Windows Recall definitely makes this problem worse! You could be doing 100% legit professional ‘work stuff’ and it could still grab things that it shouldn’t (HIPAA and many other potentially sensitive bits of corporate data).
If you disable it, make sure to check on it regularly, as MS loves to turn things back on “for you” after Windows updates run. I’ve already seen some sysadmins saying they will run a scheduled task to make sure it stays dead.