Microsoft’s Recall is still saving sensitive information in latest beta

Microsoft has reintroduced its artificial intelligence-powered Recall feature to beta testers, or Windows Insider users. Originally planned to be launched earlier this year, Recall was lambasted by cybersecurity experts and online communities due to major security concerns.

Recall a CoPilot+ PC exclusive – for now – and leverage the particular hardware of these devices to capture everything you do. It then stores this locally on the PC, which can be searched to “recall” something you’ve forgotten.

An issue with this was that it was very easy for Recall to capture sensitive information. Passwords, credit card numbers, and bank details were all being stored in an easily accessible database.

Cybersecurity experts like Kevin Beaumont found that rather than storing the information in a secure fashion, or even with basic encryption, it was available in a database format. This could then be extrapolated with basic database software.

The second round of Recall appears to have improved its security but is still storing sensitive information. In a new report from Tom’s Hardware, they found that Recall was storing and capturing credit card information in some tests.

Using mock-up web pages, Recall stored everything down to the social security number. On more recognizable checkout sections, it managed to sensor that information by simply not capturing it.

Microsoft’s second stab at Recall also appears to have upped the security. Databases seem to have some basic encryption, but the company still makes it a little too easy for potential hackers to get in.

If your Windows pin is discovered, there’s still a chance someone can access Recall through the official app. If someone gains remote access to your PC, the folder could potentially also be extracted.

While it is still in a preview state, a lot of users across social media are already showing multiple methods of how to disable it on systems. Microsoft is apparently adamant about getting this feature adopted by more users, with some finding that it’s being activated on a fresh install, including enterprise versions of Windows.

The post Microsoft’s Recall is still saving sensitive information in latest beta appeared first on ReadWrite.