Microsoft announced its artificial intelligence computers at its recent developers conference. One of the features introduced in this context is “To remindThis feature can track and share everything you do on the computer. As you can imagine, this kind of feature came with security and privacy concerns.

Call back on your computers with built-in artificial intelligence models takes screenshots of everything. When you search, you can access all the information you want in seconds. There will even be a timeline that offers the opportunity to explore. Microsoft stated that the feature is safe. He stated that everything will remain on the device and will not be used to train artificial intelligence models. But tests have shown that it is not that safe.

Attackers can easily access Recall’s data

Cybersecurity expert who also worked at Microsoft for a short time in 2020 Kevin Beaumontdiscovered that the Recall function contains security flaws. Beumont, who tested the feature last week, said the feature stored in plain text in the database Has detected. This means that a malicious person could gain access to the database and its contents. you can achieve showed. Beaumont claims it is easy for hackers to reach.

The cybersecurity expert also shared an example of this database in a post on X. In the post, he lashed out at Microsoft for claiming that hackers cannot remotely access Recall activities. He stated that the database can be accessed even without being an administrator.

This is very concerning because it creates the possibility that attackers can very easily access Recall’s content and steal information. security to disaster can cause.

Recall is offered natively on artificial intelligence-enabled computers called Copilot + PC. The company stated that the feature can be disabled to access certain applications or URLs. Moreover, it would not display certain content in browsers such as Chrome, Edge, Opera, Firefox. But no content moderation was done. This means the ability to not hide information such as passwords. This means that highly sensitive data could be at risk.

There has been no statement yet from Microsoft regarding Beaumont’s posts and growing security concerns. We’ll have to wait and see what path it will take.