Microsoft Recall Filter Sensitive Information Setting Doesn’t Work Very Well
It’s Just A Few Screenshots Of Your Credit Cards And Social Security Number
The newest version of Microsoft Recall still has some problems respecting your privacy, as tests have shown the privacy feature that is supposed to prevent it from capturing sensitive data isn’t working on most sites. This is very convenient for anyone who gets hold of those screenshots, as they contain a variety of details you definitely do not want a hacker to get their hands on. The Filter sensitive information setting, which is enabled by default should prevent the capture of SSNs and credit card details, but it only seems to work on a handful of sites.
The good news is that the actual e-commerce sites tested did not capture credit card information, but details entered into a text document, a PDF or even on a small website designed to request credit card information were all captured. It looks like Microsoft Recall still needs some serious work at hiding sensitive data in amongst all it’s screenshots. The tests didn’t investigate other types of sensitive data, so do beware when using this new feature!
The new version of Recall encrypts the screens it captures and, by default, it has a "Filter sensitive information," setting enabled, which is supposed to prevent it from recording any app or website that is showing credit card numbers, social security numbers, or other important financial / personal info. In my tests, however, this filter only worked in some situations (on two e-commerce sites), leaving a gaping hole in the protection it promises.
More Tech News From Around The Web
- The optical disc onslaught continues, with LG quitting Blu-ray players @ Ars Technica
- New stealthy Pumakit Linux rootkit malware spotted in the wild @ Bleeping Computer
- Three more vulns spotted in Ivanti CSA, all critical, one 10/10 @ The Register
- uantum processor enters unprecedented territory for error correction @ PhysicsWorld
- New IOCONTROL malware used in critical infrastructure attacks @ Bleeping Computer
- Epic Games’ App Store Will Be Preinstalled On Millions of Android Phones @ Slashdot
- Police shuts down Rydox cybercrime market, arrests 3 admins @ Bleeping Computer
- Critical WordPress plugin vulnerability under active exploit threatens thousands @ Ars Technica
- HDMI 2.2 Specs With Increased Bandwidth To Be Announced at CES 2025 @ Slashdot
- Good news! You’ll soon be able to send faxes again with Windows 11 24H2 @ The Register
- The 6GHz Band Opens In The US @ Hackaday
- XikeStor SKS1200-8XGT Review A Cheap 8-port 10Gbase-T Switch @ ServeTheHome
- eport: AT&T, Verizon aren’t notifying most victims of Chinese call-records hack @ Ars Technica
- Woojer Vest 3 High Fidelity Haptic Vest Review @ NikKTech
