Microsoft's AI "Recall" Feature Caught Screenshotting Your Social Security Number

Peeping Bot Even after a revamp, Microsoft’s AI-powered “Recall” tool, which quietly takes snapshots of your screen every few seconds, is still capturing your sensitive information. As an investigation by Tom’s Hardware found, the Windows feature routinely captured credit card numbers, social security numbers, and other financial and personal data that was onscreen — even when the new “filter sensitive information” setting was enabled. Ideally, this filter, which is now on by default, is supposed to prevent snapshots from being taken when such information is being displayed. But there are clearly still some glitches. “When I entered a credit card number and a random username / password into a Windows Notepad window, Recall captured it, despite the fact that I had text such as ‘Capital One Visa’ right next to the numbers,” wrote Avram Piltch, Tom’s editor-in-chief. “Similarly, when I filled out a loan application PDF in Microsoft Edge, entering a social security number, name and DOB, Recall captured that.” The issue persisted when Piltch used his real information. Talking Shop According to Tom’s testing, Microsoft’s new feature only worked reliably when credit card info was being entered into online stores (specifically Pimoroni and Adafruit). That’s good — but not nearly good enough. “What my experiment proves is that it’s pretty much impossible for Microsoft’s AI filter to identify every situation where sensitive information is on screen and avoid capturing it,” Piltch wrote. “My examples were designed to test the filter, but they’re not fringe cases. Real people do put…Microsoft's AI "Recall" Feature Caught Screenshotting Your Social Security Number

Leave a Reply

Your email address will not be published. Required fields are marked *