Researcher Tool Tests Windows Recall Privacy Safeguards

Cybersecurity researcher Alexander Hagenah has released a tool called TotalRecall Reloaded that demonstrates potential vulnerabilities in Microsoft's redesigned Recall feature for Windows 11, prompting renewed debates over the AI-powered tool's privacy protections.

Recall, which captures screenshots and records user activities such as emails, documents, messages, and browsing history to create a searchable timeline, was initially announced in 2024 for Copilot+ PCs. The feature faced immediate backlash for storing sensitive data in an insecure format, leading Microsoft to delay its rollout and redesign it over the following year. The updated version, available to Windows Insiders since late 2024, incorporates enhanced security measures, including encryption within a Virtualization-based Security Enclave and mandatory Windows Hello biometric authentication via fingerprint or face scan to access data or enable snapshots.

Hagenah, who previously developed a tool exposing flaws in the original Recall, disclosed his findings to Microsoft last month before making TotalRecall Reloaded publicly available on GitHub. The tool operates by injecting code into the AIXHost.exe process, which...