Part 4/7:
Misleading Assurances and Fears of Data Exposure
A Wired article has called into question Microsoft’s claims of secure data storage. It was suggested that the encryption methods Microsoft utilizes are not foolproof. If malicious entities find a way to gain administrative privileges on a computer, they could potentially circumvent these security measures and access Recall’s database.
Researchers from Project Zero have uncovered ways to use Windows token impersonation to gain elevated access to the Recall data, thereby accessing sensitive browsing history without requiring admin rights. This information could be mined to build a detailed profile of a user's interests and activities, raising ethical and security concerns for all users, especially those less tech-savvy.