Der Kaiser ist nackt

Satya Nadella sagt im Video zur Recall Produkteinführung: “We promise to make Recall super secure. Nobody will be able to access it.”1 Das ist das “Security above else” Versprechen von Nadella und Microsoft.2 Eine glatte Lüge wie Kevin Beaumont aka GossiTheDog aufzeigt. Er hat einen ersten Blick auf Recall werfen können:3 Recall uses a bunch of services themed CAP - Core AI Platform. Enabled by default. It spits constant screenshots (the product brands then “snapshots”, but they’re hooked screenshots) into the current user’s AppData as part of image storage. The NPU processes them and extracts text, into a database file. The database is SQLite, and you can access it as the user including programmatically. It 100% does not need physical access and can be stolen. Read more