Microsoft recall

HomerJ

Prolific Poster

Ethical hacker Alex Hagenah has launched a tool, called TotalRecall, that shows how anyone with enough know-how and the right tools could steal the recalls saved on a Windows machine and access that data, encryption-free, on a target device. According to Hagenah, whose work was reported on earlier by Wired, he analyzed Windows Recall and found that the tool -- which takes screen captures of a Windows machine every five seconds -- stores the data completely unencrypted on the user's computer.

"TotalRecall copies the databases and screenshots and then parses the database for potentially interesting artifacts," Hagenah wrote in a GitHub posting about TotalRecall. "You can define dates to limit the extraction as well as search for strings (that were extracted via Recall OCR) of interest. There is no rocket science behind all this."
 

HomerJ

Prolific Poster

HomerJ

Prolific Poster
i actually dont know the point of the recall feature to consumers, its not adding anything of worth that cant be done already via bookmarking or off hand remembering, i cant see how creating snapshots of everything you do apart from spying is adding anything, people have got to this point without much of a problem.
 
Top