Signal have rolled out an update to all users that stops Microsoft Recall from capturing Signal conversations.
I’ve tested this and it works. Brilliant work by the @signalapp team. 💪
They call on Microsoft to build better, as there was no standardised way as an app developer to do this. Because Signal is open source, now app developers have a template to protect their users from Windows.
I found an interesting Microsoft Recall issue with the latest version - Recall is enabled on my PC, but the tray icon (bottom right) saying it is running is missing.
Edit: after a reboot, it's back. I'll keep an eye on it. After the latest Windows Update the UI wasn't visible, but it was still recording.
Brave are blocking Microsoft Recall by default, hopefully Vivaldi follow. https://www.bleepingcomputer.com/news/security/brave-blocks-windows-recall-from-screenshotting-your-browsing-activity/
The Register took a look at Microsoft Recall and found it captured personal information, such as social security numbers and such in its database.
They also found they could access it remotely using TeamViewer, using just a PIN.
https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/
I still use Recall on my development laptop, and actually use the feature quite a lot through testing Recall... and yet, I've started to get regular engagement prompts to use it lately.
To me this strongly suggests people aren't actually using it in the wild as MS are trying to juice numbers via nudge prompts.
On a separate note I also got prompted to change my default browser to Edge (I use Vivaldi) and my search engine to Bing when switching on my laptop today 🤦
Hey, Microsoft just re-invented standby / sleep mode. 🙄
Microsoft are upselling security controls for Microsoft Recall, which allow orgs to limit what it records specifically - if the org pay for Microsoft Purview.
I’ve had a look at how this works under the hood, it is using undocumented features in Recall. https://learn.microsoft.com/en-us/purview/dlp-recall-get-started
Microsoft is reviewing its Copilot+ integrations, and is saying internally that Microsoft Recall has failed.
@GossiTheDog that’s a very fancy way to design a ransomware.
@GossiTheDog Wow, this is shitty, even for Microsoft.
@GossiTheDog I've got an idea, just use an OS which doesn't require you to play settings whack-a-mole in the first place.
@GossiTheDog Didn't they get yelled at a year or so ago because of some breach of government systems that didn't get caught because they were charging extra for event logging or something? Kinda feels like if somebody is paying for your product, they should get the whole product, not just bits and pieces.
@GossiTheDog Aside from the obvious anticompetitive potential; 'recall' seems far too dangerous to have undocumented behavior; especially when complexity has a nasty habit of meaning scope for vulnerability.
@GossiTheDog best data loss prevention for #Microsoft #Recall in one sentence.
“Switch to #Linux, any Linux, it does not matter which Linux.”
@GossiTheDog Will one of you clever developers please create a nice web managed, locally hosted Desktop Linux MDM so we can start to tempt businesses away from Windows? Not a cobled together ansible/samba mess, but something robust and easy to use. Ideally it would be open source, but even if it's not, there is a real gap in the market here.
@GossiTheDog This seems like a good idea. Allow enterprises to leverage their MIP labels and other things in Purview to control Recal. I like it.
I bet it is a part of the E5 or higher skus.
@GossiTheDog Microsoft upselling solutions to problems caused by their own design decisions, is it?
@GossiTheDog it's called Administration as a Service, or AaaS,.
It's pronounced A$$$$.
@GossiTheDog this feels a lot like… a protection racket? They’re selling orgs ways of protecting against a broken product no one wants that’s hard to opt out of.
Nice data you’ve got there, it’d be a shame if something “happened” to it
@GossiTheDog
So MS has gone full protection racket then.
Nice data you got there! Would be a shame if someone... recalled it...
@GossiTheDog they feed us poison so we buy their cures
![Robert [KJ5ELX] :donor:](https://media.infosec.exchange/infosec.exchange/accounts/avatars/115/833/042/784/456/710/original/6c4929fda05c7451.gif "Robert [KJ5ELX] :donor:")
