Copilot vs. Signal - Fight for Privacy
What do you do when you're a privacy focused application running on an OS that has built-in spyware? You hack a solution of course!
I've written about the state of Microsoft's desktop OS before, so I won't waste a bunch of column-space on that. I've also written on the merits of Signal and the need for secure, private communication solutions. And if you've read much else on this site you know I'm focused on privacy, security, and Linux which should tell you what my recommendation is for both of these solutions. But if not, here's the abridged version:
- Windows 11 is leading the way (along with Google's products) in the race to integrate spyware into your operating system
- Your best alternative to Windows 11 is Linux, and it isn't as hard to move to as you think.
- Signal is (one of the?) best solution(s) for ensuring private, secure communications over the Internet - which should be a priority for you!
We're at under 200 words so far - see, I meant it when I said "abridged" - but I think you get where I'm coming from. OK, enough background, let's discuss the actual issue here.
Recall - It Isn't Just SciFi Anymore
If you aren't already familiar with Microsoft's Copilot Recall feature, you really do need to know about it, and here's a fair primer on the topic:
Benj Edwards
Again, the abridged version is that by default Recall will take screen captures of your computer every few seconds and then analyze that so you can relive what you were doing on your computer last week I suppose. (Honestly, I'm not really sure I understand their use-case here in terms of actual value to the user - it just seems like an excuse to record everything I do)
Now I don't know about you, but I have to say that there are plenty of things I do on my computer that I really don't need or want a recording of. Let's just list a few examples:
- I write that angry email to someone where I call them every name in the book, link there parentage to shrubberies and small rodents, and then delete the email without sending it.
- I look up a term I don't know that somebody just used on the Urban Dictionary and after reading the definition/description don't really need anybody knowing I looked at it, least of all getting reminded by my computer that I looked it up next week.
- I enter my "security question" answers on my bank's website to do my banking - for that matter I don't really want my computer capturing my account numbers or current balance.
- I go to Web MD to try to figure out that strange rash that just showed up, and some of the possible diagnoses would break up my marriage if my spouse were to jump to conclusions.
It just seems like there are plenty of things that need some sort of "exemption" to such recording, storage, and analysis that building this into the OS is at worst premature and at worst an extreme invasion of privacy.
But Wait, There IS an Exception!
It turns out that Microsoft has developed an exception to these continuous screenshots! Woohoo! Our privacy is saved! High-fives for everyone!
(reads the fine print about the exception)
Oh. Well, it seems this exception is for "Digital Rights Management" (DRM). Again, the abridged version: DRM is not about protecting your privacy, but about ensuring that Warner Brothers, Disney, MGM (Amazon), etc. get to charge you for viewing their works. Yup, this exception isn't for you, it is so you can't use Recall to somehow record and play back the latest episode of Andor or White Lotus.
Aren't you happy that Microsoft is looking out for these content creators? On your computer? In your home? What good citizens they are!
Sometimes You Gotta Hack Stuff
In May, Signal announced that they updated their software to utilize this DRM loophole to make your Windows Signal client (yes, there is one!) look like it is DRM content to Recall, thus preventing Microsoft from recording the app's content.
Unfortunately(?) this DRM based setting prevents ANY screenshot by Recall while you have the Signal app open. So if you somehow are seeing value in Recall, you'll find that the system isn't as helpful to you when Signal is running.
This hack is necessary because Recall has no privacy-based instruction set for it's recordings - only one that ensures Paramount's or Fox's content isn't recorded.
And that hack is necessary because there's no financial incentive for Microsoft to worry about your privacy, but there IS a financial incentive for them to partner well with Hulu and Netflix. Until that changes - either by legislation or an extremely broad boycott of Microsoft products - our current privacy dystopia won't improve.