What is the Dangerous Spy Lurking in Windows 11?

Overall, Windows 11 has been accepted well in spite of a few bugs which Microsoft has addressed. Thankfully, it does not present a major learning curve, as it feels substantially the same as Windows 10 and still runs the same applications as before.

BUT…

The biggest ’problem child’ of the new platform is Recall. Due to early concerns, Microsoft has delayed Recall several times to beef up security and privacy, added a biometric sign-in requirement, and has made it completely opt-in and end-to-end encrypted, so that not even Microsoft can access your Recall data.

In essence, what Recall does is continuously take screenshots of your screen and then stores them locally, raising concerns about unintended data exposure and the potential for sensitive information to be captured, such as passwords, financial data, or confidential documents.

Heavy ‘buzz’ surrounding Recall is popping up these days, so let’s take a good look at what would matter to you – and what wouldn’t.

TechTarget describes the benefits: “Recall is designed to improve efficiency and enhance productivity by letting users instantly retrieve past content viewed on their devices -- such as webpages, applications, images and documents -- through natural language commands. For example, a user could ask Recall, "Open the PDF I was reading last week about configuring solar inverters," eliminating the need to manually search for the document.

The feature uses local AI models to search and retrieve previously viewed content.”

With all that convenience, remember this simple fact: Anything can be hacked.

But you can’t necessarily just stumble into Recall, even if you’ve switched to Windows 11. Unless you have a very specific PC, Recall will NOT be included in your W11 platform. It is currently only available on Copilot+ PCs. These PCs require a dedicated neural processing unit (NPU) capable of processing at least 40 TOPS (trillions of operations per second).

Windows PCs without this NPU will NOT be able offer Recall or any other Copilot+ features. Basically, that means every single PC sold before mid-2024 and the vast majority of PCs sold since then.

This is important. Without that NPU, Recall cannot end up as part of your Windows 11 package.

So, why all the fuss?

Because that could change, just like everything in the cyber world changes all the time. If for no other reason, the next computer you buy could have that NPU, in which case Recall could easily appear as a Windows 11 feature on your PC.

Given that, it will be important that you know what it’s all about before you even consider playing around with it. The trick will be knowing what changes Microsoft has made before it lands in your lap. If, they are smart, they will do nothing about the encryption or the extra biometric step involved in enabling and accessing it.

Most importantly, this potentially dangerous tool HAS to remain a voluntary ‘Opt-In’ only feature. If something is going to record your every stroke and activity on your PC, you need to be able to decide if it’s active.

So, is this ‘Much ado about nothing?’ Maybe, but it’s on the horizon, so it’s worth knowing about.

Meanwhile, Microsoft has gone out of its way to address any potential cybersecurity concerns: Recall will be turned off by default and can be removed from Windows root-and-branch by users and IT administrators. They have also overhauled Recall’s underlying security architecture, encrypting data at rest so it can't be accessed by other users on the PC.

They have also added automated filters to screen out sensitive information, frequent reauthentication with Windows Hello is required anytime a user accesses their own Recall database. A bit of extra work, but better safe than sorry.

Here, in Microsoft’s own words, are what you need to use Recall:

“System requirements for Recall

Your PC needs the following minimum system requirements for Recall:

  • Copilot+ PC that meets the Secured-core standard
  • 40 TOPs NPU (neural processing unit)
  • 16 GB RAM
  • 8 logical processors
  • 256 GB storage capacity
    • To enable Recall, you’ll need at least 50 GB of storage space free
    • Saving snapshots automatically pauses once the device has less than 25 GB of storage space
  • Users need to enable Device Encryption or BitLocker
  • Users need to enroll into Windows Hello Enhanced Sign-in Security with at least one biometric sign-in option enabled in order to authenticate”

The Bottom Line

It does seem like they hype and scare of Microsoft Recall is premature, but that does NOT mean it can‘t end up as part of your PC’s Windows 11 platform sooner or later. Anything that was once ‘premature’ can become mature.

FAQs

What are the security concerns of Microsoft recall?
Anyone who has access to your device has access to the data, stored locally by Recall. If your device is compromised by malware, the attacker could potentially access the entire Recall database, extracting sensitive information stored in screen snapshots.

How to tell if recall is installed?
If you are unsure whether Recall is installed on your Windows 11 computer, it’s easy to find out. Simply search for ‘Recall’ in the Start Menu search bar. If the app appears, it means Recall is installed. You can also check for a Recall icon in the system tray, which indicates when snapshots are being saved.

Why is Microsoft pushing recall?
Because, just like anything else, Microsoft sees it as a great benefit to users. That doesn’t mean it’s right for you. While Recall was initially meant to launch with the first batch of Copilot Plus PCs last June, it was delayed due to security concerns. In October, Microsoft planned to re-release it, but it pushed it back again to give itself a chance to make "a secure and trusted experience."

Will Microsoft switch off recall by default after security backlash?
They already have – last June. Microsoft said the controversial Copilot Plus PC Recall feature will no longer be enabled by default after backlash from security and privacy experts.

How secure is your network?

As a reputable member of the IT Support Los Angeles community since 2002, IT Support LA offers a FREE, no-risk network and cybersecurity assessment. It is a non-intrusive scan that allows us to deliver a comprehensive report that is yours to keep. No strings, and no obligation to ever use our Managed IT Services.

The best defenses are expert cybersecurity to protect your data from theft, and a top-notch Managed Services Provider (MSP) to ensure continued reliability and defenses against newly emerging threats.

With our 100% Money Back Guarantee in writing, we offer a risk-free way for prospective clients to try us out. Because we do not require a ‘hard’ contract, our clients can fire us at any time with 30 days’ notice. We have to be good.

Among the Managed IT services we provide:

IT HelpDesk Service
Onsite IT Support
Cybersecurity
Cloud migration and management
Email migration services
Backup and disaster recovery
VoIP phone systems
IT disposition and recycling
Office moves
White label services (IT to IT)

IT Support LA is an award-winning Managed Services Provider (MSP):
o  3 Years awarded Best IT by the Small Business Expo
o  Awarded 2nd best company of any type in the US by the Small Business Expo SB100
o  Awarded Best IT Support in California by Channel Futures
o  Winner of Best IT in Los Angeles by Channel Futures
o  Listed as one of the world’s Top 501 MSPs by CRN and in the top 250 in the   ‘Pioneer’ listing
o  4 years listed as one of the Top 501 MSPs in the World by Channel Futures
o  Listed as #21 MSP in the World in Channel Futures NextGen 101
o  Globee 2021 Bronze Award winner for Chief Technology Officer of the Year
o  Globee 2022 Gold Award winner for Chief Technology Officer of the Year
o  Named one of 2022’s 50 ‘Best’ businesses in California by UpCity
o  Named Best of IT winner by UpCity
o  Winner of Local Excellence Award for 2021, 2022 and 2023 by UpCity
o  Named Best of Cloud Consulting winner by UpCity
o  Certified as Top Managed Services Providers and Cybersecurity Pro by UpCity
o  Named Best IT in Los Angeles by Expertise.com.

Want help organizing your devices?

Remember, everybody has different needs, so do what will work best for you. Contact us now for personalized advice on organizing your system and devices to boosting productivity, and also take advantage of our FREE no-risk network and cybersecurity assessment.

818-805-0909