3 ms·

Uh, Recall does the OCR for you already and you can just search the saved data for stuff like "password" or "credit card". It'd probably be easiest for an attac

Uh, Recall does the OCR for you already and you can just search the saved data for stuff like "password" or "credit card". It'd probably be easiest for an attacker to just upload the Recall database as soon as they gain access to the machine and then do all the processing on their own systems rather than trying to do anything that might trigger suspicions or use resources on a victim's machine.

haswell 2y ago
And based on initial estimates, the actual data stored by Recall is pretty small on a daily basis, making exfiltration a potentially very fast process. One researcher was able to use existing info stealer malware to exfiltrate the entire database before windows defender could kick in and remediate the issue.