Microsoft Delays Rollout of Recall Feature on Copilot Plus PCs Amid Security Concerns

Microsoft has once more postponed the launch of its new Recall feature, designed for Copilot Plus PCs, citing security concerns as the primary reason for the delay. The feature, which has sparked controversy due to its capability to take screenshots of nearly everything a user sees and does on these PCs, was originally expected to debut in June. However, the initial launch was deferred to October, only to face another postponement until December.

Brandon LeBlanc, Senior Product Manager for Windows, expressed Microsoft's commitment to delivering a "secure and trusted experience" with the Recall feature. The tech giant is taking additional time to refine the user experience, planning to preview the feature with Windows Insiders by December. "We are committed to delivering a secure and trusted experience with Recall," LeBlanc told The Verge, a leading technology news outlet.

The Recall feature allows users to capture multiple screenshots during their sessions, creating an "explorable timeline" where users can revisit these images. This can include a broad array of information, such as user files, photos, email, and browsing history. However, Dr. Kris Shrishak, an advisor on AI and privacy, has criticised the feature, describing it as a potential "privacy nightmare" due to the sensitive nature of the data that could be captured, like passwords and bank details.

Central to the delays are security vulnerabilities that emerged when ensuring the feature is an opt-in experience, allowing it to be completely uninstalled, if desired. Since June, efforts have centred on encrypting the Recall database, making it accessible only through Windows Hello, Microsoft's biometric authentication tool.

Microsoft has reiterated that Recall will not be obligatory on Copilot Plus PCs and can be entirely removed by the user. This reassurance comes amidst speculation, fuelled by YouTube videos, suggesting that Recall was being installed on all PCs equipped with Windows 11, version 24H2.

When Recall was initially announced during the Microsoft Rebuild event, there was an acknowledgment of potential security issues associated with the feature. Although the stored screenshots would reportedly not be accessible to Microsoft, the indiscriminate nature of the information captured was highlighted as a risk, prompting the UK’s Information Commissioner’s Office (ICO) to engage in discussions with Microsoft regarding the technology.

In response to these privacy concerns, Microsoft has implemented several security enhancements, such as encrypting captured screenshots, which are further safeguarded by the Trusted Platform Module (TPM) linked to Windows Hello. In a broader effort to bolster its security infrastructure, Microsoft announced in October that it has engaged the equivalent of 34,000 full-time engineers working on the Secure Future Initiative (SFI) project.

As Microsoft continues to address security vulnerabilities and enhance user privacy safeguards, the tech community anticipates the eventual release of the Recall feature to Windows Insiders by the end of the year.

Source: Noah Wire Services