On: Windows Recall demands an extraordinary level of t...

[lolc]

This Recall feature keeps text of emails typed and never sent, of documents viewed and deleted.

[tssva → lolc]

And that makes the security associated with it any more important than my kept documents how?

[wkat4242 → tssva]

It's the more exposed thought process that shines a strong light into your mind. It's not just what you do but the why.

It's no wonder collecting this info is a priority. It will be a goldmine for dataminers with the right correlation. Sure right now it's not collected centrally but I'm sure sooner or later there'll be a quick "just click off this tiny T&C update before you continue" crossing our paths.

Also, it means that this confidential info is now in more places than one. It's no longer sufficient to encrypt a file and lay it on a usb stick in the safe.

And it's also there in centralised place ripe for the taking. Not even any need to scan the system to find valuable information.

[lolc → tssva]

Text on screen can be more confidential than text on disk.

[tssva → lolc]

And it can be the other way around. I still don’t get why this demands some new level of security beyond what protects other data.

[lolc → tssva]

So I want to read an encrypted mail, then delete it. What do I do?

[tssva → lolc]

Disable the feature permanently or click the Recall icon on the system tray and quickly pause it while you read the encrypted email.

[lolc → tssva]

Ok, what if I forget or don't know it's active?

[tssva → lolc]

Then that is your fault and it is on you.

[lolc → tssva]

Users will be blamed until security improves.

[tssva → lolc]

God forbids users take any responsibility for their own security.

[lolc → tssva]

Who argues against users taking responsibility? The users who demand exfiltration protection around the Recall DB? Or the commenters who maintain that extra protections are pointless?