4 ms·

> Browsing history, Undo in any number of productivity software, search histories both local (eg: Windows) and remote (eg: Google, Bing), password managers and

> Browsing history, Undo in any number of productivity software, search histories both local (eg: Windows) and remote (eg: Google, Bing), password managers and Post-Its on monitors(tm), chat logs, vidja gaem save files, and more. None of these are taking screenshots of your entire desktop, using OCR and AI to summarize all text/secrets displayed and storing them in a single centralized, location, (currently) easily exfiltrated and searched by any one gaining access to your desktop They made the right call to delay and revisit this.

Dalewyn 2y ago
Is there a difference between that and the others? I'm not seeing one fundamentally and brutally speaking. Also, if a hostile has access to your computer then all bets are off. Nothing matters at that point besides how quickly you can remove that access if it's even possible and whether you can deal with the fallout.
- davesmylie 2y ago
  I probably would have agreed once that someone physically having access to your computer was as bad as things could get. Given the choice now though between someone having access to my computer, _or_ someone having physical access to my computer as well as a database with a detailed and lengthy history of every secret i've ever seen in my terminal or web browser, as well every bit of employer or customer data that I've seen whilst working, as well as well ... everything else personal, all in one nice tidy package they could download and search as they pleased - I think the former would end up not being quite as bad things could get.
- jononor 2y ago
  The Microsoft approach will slurp up passwords/tokens, as well as anything in incognito browser window, etc. Things that are explicitly designed to be private. And it may have stored images, not just text.
  - Dalewyn 2y ago
    >slurp up passwords/tokens So like the clipboard? >anything in incognito browser window None of that is private. >And it may have stored images, not just text. They're both data. Once again: Is there any difference? I'm not seeing one. Pedantics aren't worth my time.

Dalewyn 2y ago

Is there a difference between that and the others? I'm not seeing one fundamentally and brutally speaking. Also, if a hostile has access to your computer then all bets are off. Nothing matters at that point besides how quickly you can remove that access if it's even possible and whether you can deal with the fallout.

davesmylie 2y ago
I probably would have agreed once that someone physically having access to your computer was as bad as things could get. Given the choice now though between someone having access to my computer, _or_ someone having physical access to my computer as well as a database with a detailed and lengthy history of every secret i've ever seen in my terminal or web browser, as well every bit of employer or customer data that I've seen whilst working, as well as well ... everything else personal, all in one nice tidy package they could download and search as they pleased - I think the former would end up not being quite as bad things could get.
jononor 2y ago
The Microsoft approach will slurp up passwords/tokens, as well as anything in incognito browser window, etc. Things that are explicitly designed to be private. And it may have stored images, not just text.
- Dalewyn 2y ago
  >slurp up passwords/tokens So like the clipboard? >anything in incognito browser window None of that is private. >And it may have stored images, not just text. They're both data. Once again: Is there any difference? I'm not seeing one. Pedantics aren't worth my time.