Despite Microsoft’s promises, Recall retains your sensitive data

Microsoft hasn’t solved any of Recall’s critical problems. Artificial intelligence-powered “photographic memory” debuted in a test version a few weeks ago. Despite months of delays and promises of increased security measures, Recall has a key vulnerability.

According to a report from Tom’s EquipmentRecall can capture your credit card informationeven if you activate protective filters. In an experiment conducted by editorial director Avram Pilch, an AI recorded and stored financial information. The information includes the full credit card number, expiration date, and three-digit security code (CVC).

Designed step HTML form with fields that included the user’s personal information, including credit card. The author mentions that the form clearly stated the phrase “credit card,” but Reminder ignored it and recorded the details. In another experiment, Pietsch introduced his social security number in PDF and the AI ​​also took a picture of it.

The report states that These failures occur even if the privacy filter is enabled.. As final evidence, the journalist wrote down information about the plastic in a notepad, indicating that it was a credit card. Again, Recall captured the information and stored it in the snapshot history.

Despite Microsoft’s changes, Recall still collects sensitive information.

One of the reasons for the delay in launching Recall is due to The little attention Microsoft paid to privacy. Activists have pointed out potential problems with the collection of personal data during a session of this feature. As if that weren’t enough, a cybersecurity expert has discovered that the snapshot history is stored in an unencrypted text document, raising concerns among people and regulators.

A few months later, with some changes under the hood, As a reminder, it has been released for some Insider program users.who will be guinea pigs to test this version. Despite the privacy adjustments and the introduction of a confidential information filter, we would like to remind you. not ready and requires additional work.

Report Tom’s Equipment suggests that the PC’s stellar Copilot+ feature is sluggish. Blocking credit cards and other sensitive data applies to online stores, but not forms, PDFs, or local documents.

On its help website, Microsoft mentions that sensitive information filtering is enabled by default and prevents the capture of personal data. This feature also blocks official identification numbers such as DNI, Driver’s License or Tax Identification Number from Spain, and CURP from Mexico..

“Sensitive information filtering is enabled by default and helps prevent passwords, national identification numbers, and credit card numbers from being stored in memory. Sensitive information always remains on the device, regardless of whether the privacy filtering setting is turned on or off.”

Considering the accusations Tom’s EquipmentMicrosoft mentioned that they are working on blocking credit card numbers and other sensitive data. Since Recall is in testing stage, incidents may occur like the one reported.