Brutkey

Kevin Beaumont
@GossiTheDog@cyberplace.social

Tabletop scenario for you:

Employee gets into a dispute with employer, leaves, had sensitive role. Employer revokes access, devices etc. Employee had logged in via BYOD to email, IM etc.

Due to Recall, employee walks away with 6 months of screenshots of everything she's ever worked on in a text indexed form - every email, chat, document, Teams call with video snapshots, transcripts of verbal calls etc - even if they set M365 to not store documents locally.

What does the employer do now?

Kevin Beaumont
@GossiTheDog@cyberplace.social

Signal have rolled out an update to all users that stops Microsoft Recall from capturing Signal conversations.

I’ve tested this and it works. Brilliant work by the @signalapp@mastodon.world team. 💪💪

They call on Microsoft to build better, as there was no standardised way as an app developer to do this. Because Signal is open source, now app developers have a template to protect their users from Windows.

https://signal.org/blog/signal-doesnt-recall/

Kevin Beaumont
@GossiTheDog@cyberplace.social

I found an interesting Microsoft Recall issue with the latest version - Recall is enabled on my PC, but the tray icon (bottom right) saying it is running is missing.

Edit: after a reboot, it's back. I'll keep an eye on it. After the latest Windows Update the UI wasn't visible, but it was still recording.

Kevin Beaumont
@GossiTheDog@cyberplace.social

Brave are blocking Microsoft Recall by default, hopefully Vivaldi follow. https://www.bleepingcomputer.com/news/security/brave-blocks-windows-recall-from-screenshotting-your-browsing-activity/

Kevin Beaumont
@GossiTheDog@cyberplace.social

The Register took a look at Microsoft Recall and found it captured personal information, such as social security numbers and such in its database.

They also found they could access it remotely using TeamViewer, using just a PIN.

https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/

Paul Sutton
@zleap@qoto.org

@GossiTheDog@cyberplace.social

This is why I have SERIOUS concerns regarding privacy, data protection and safeguarding concerns with this enabled, Schools use a system called CPOMS to report concerns in schools, this information is confidential and is usually very sensitive information (a disclosure from a child for example) all this recorded.

if while using MS recall decides to snap shot the page with identifiable information on it can have SERIOUS Implications for everyone involved.