Microsoft’s AI-powered Recall feature still saves snapshots of sensitive information: Report

Microsoft finally launched its Artificial Intelligence (AI)-powered recall feature with the Windows 11 Insider Preview update last month. But contrary to Microsoft’s claim that the updated version doesn’t store sensitive information like credit cards or passwords, a new report suggests that this security measure rarely works. Several examples have emerged of an AI feature saving snapshots of credit card details and Social Security numbers Filter sensitive information Settings enabled.

Tom’s Hardware detailed its experience with an updated version of Microsoft’s recall feature in a report. The publication highlights that they encountered an example of an AI feature capturing screenshots of sensitive information when they entered credit card details and random login credentials into the Notepad app. In this case, the words “Capital One Visa” were written right next to the notice. The report clarifies that this happened due to the use of fake and legitimate credit card details.

On another occasion, the publication loaded a loan application PDF on the Microsoft Edge browser. This included contact details, date of birth and social security number. Another example of a recall not filtering confidential information occurred when an HTML page containing a web form was created that required users to “enter” a form. [their] Credit Card Number Below” It included text fields to enter the credit card type, its number, CVC and expiry date.

The report claims that Microsoft’s AI software has also captured a snapshot of these details.

However, two instances of the recall’s safety filters fulfilling their purpose were also recorded. This was reported on the online payment pages of two platforms – Pimoroni and Adafruit. The AI ​​feature captured snapshots of the screen before and after filling in the details, but not during.

First introduced at the Microsoft Surface and AI event in May, the recall was withdrawn from Windows test builds a month later due to privacy and security concerns. The Redmond-based technology giant paused its rollout for Windows Insiders. Last month, it launched CoPilot+ PC with Windows 11 Insider Preview Build 26120.2415 (KB5046723) on the Dev Channel. Microsoft emphasized that the snapshots remain on the device and are not sent to Microsoft or third-party servers, or used for training AI models or any other features.