Email or username:

Password:

Forgot your password?
evacide's posts Post Back to profile
Top-level
Andrew Zonenberg

@wrosecrans @MisuseCase I would be extremely surprised if this doesn't ship with a GPO to disable it.

(Also, MS not enabling group policy on consumer focused windows editions probably ranks alongside the Win8 start menu destruction as one of the worst design decisions they've ever made)

22 May at 2:29 | Wall-to-wall | Open on ioc.exchange
2 comments
wrosecrans

@azonenberg Sure, but the biggest risk is to people and orgs that aren't executing infosec perfectly. Ooops we had a bad password policy multiplied by ooops we left Recall's GPO default.

In a hypothetical perfect IT environment where all GPO's and such are perfectly managed, Recall probably poses little risk to start with. It's only dangerous in the real world.

22 May at 2:32 | Open on mstdn.social
Andrew Zonenberg

@wrosecrans Yeah agreed. It's just one of 500 catastrophically horrible anti features that people will need to turn off to regain some semblance of a secure baseline.

22 May at 2:34 | Open on ioc.exchange
Go Up