Microsoft’s AI recall tool still consumes credit card and Social Security numbers

What a week! On Monday the police 26-year-old Luigi Mangione was arrested She accused him of killing UnitedHealthcare CEO Brian Thompson. Mangione’s five-day escape from authorities ended after he was seen eating at a McDonald’s restaurant in Altoona, Pennsylvania, about 300 miles from Manhattan, where Thompson was shot and killed on the morning of December 4. Authorities say they found Mangione carrying fake IDs and a 3D card. -Ghost Gun Edition Its model is known as FMDA, or Free Men Don’t Ask.

Meanwhile, a torrent of mysterious drone sightings across New Jersey and neighboring states was causing so much chaos, it quickly gained federal attention. While many people wondered Why couldn’t the US military shoot down drones?say the FBI, Department of Homeland Security and independent experts The secret of drones may not be such a big mysteryPerhaps drones are mostly just airplanes.

As for more ground threats, We have been immersed in the far-right world of “activist clubs,” Small groups of young, fitness-focused men steeped in extremist ideology and linked to numerous violent attacks. As the man who helped invent the Active Club network, Robert Rondeau, was sentenced in federal court this week, active clubs are proliferating around the world.

Finally, we investigated fraud schemes that… Use small cameras to gain an illegal advantage in a game of pokerAnd we questioned the roads Humans will use generative AI to make the world a more dangerous place.

But that’s not all. Every week we round up privacy and security news that we haven’t covered in depth ourselves. Click on the titles to read the full stories. And stay safe out there.

Back in May, Microsoft Cheerfully The company announced Recall, an AI feature for some Windows PCs that silently takes screenshots every five seconds, then allows you to easily search through the resulting digital footprint. Forgot where you saw the recipe online? In theory, clicking on a few keywords in the recall could find the dish again. It didn’t take long for the privacy and security community to catch on Find a gap Holes in the feature.

In response, Microsoft delayed and eventually released Recall He made some important changes– Such as enabling Recall instead of turning it on by default, better encrypting information captured by Recall, and adding authentication to access stored data. Recall it was finally launched for some users this month.

However, this week, the recall will be tested by Tom’s devices showed That the main guarantee put in place by Microsoft may still fail. With the recall setting called “Filter Sensitive Information” turned on, Tom’s Hardware’s tests found that it still captured screenshots of some sensitive information — such as credit card numbers and Social Security numbers. When the post typed the credit card number, username and password into the notepad window, they were collected in screenshots. “Similarly, when I filled out a PDF loan application in Microsoft Edge, entering my Social Security number, name, and DOB, Recall picked that up,” Avram Belch said. He writes. However, the tool did not record the details when entered at two online stores.