• In December, an investigation by Tom’s Hardware found that Recall frequently captured sensitive information in its screenshots, including credit card numbers and Social Security numbers — even though its “filter sensitive information” setting was supposed to prevent that from happening.
  • Septimaeus@infosec.pub
    link
    fedilink
    English
    arrow-up
    60
    ·
    11 days ago

    Just a tip: if you must use consumer editions of Windows regularly, consider adding an automatic provisioning tool like AME to your workflow.

    The example above uses customizable “playbooks” to provision a system the way docker compose would a container image, so it can fill the role of a VM snapshot or PXE in non-virtualized local-only scenarios.

    The most popular playbooks strip out AI components and services (there are many more than just Recall) but also disable all telemetry and cloud-based features, replace MS bloatware with preferred OSS, curtail a truckload of annoying Windows behaviors, setup more sensible group policies than the defaults, and so forth.

    I have a few custom playbooks for recurring use cases so that, when one presents, I can spin up an instance quickly without the usual hassle and risk.

    • boatswain@infosec.pub
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 days ago

      This looks like useful stuff; thanks for sharing. I’m not on Windows myself any more, but this looks like info with passing on to those in my life who are.

    • Jay@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 days ago

      This is really interesting! I’ve usually installed Winaero Tweaker back when I still used Windows, if I knew this existed I probably would’ve gone with this instead. Having access to “playbooks” would be quite handy.