1, Microsoft should add an API to allow apps to declare content to be private/non-indexable. At the same time, they should add overrides in Recall so users can choose to force index or force ignore specific apps regardless of how they mark their content. The power should be in the hands of the user. If the user indicates they want to index their Signal activity, it should be done in an unblockable way. Conversely, the default would allow for ignorant users' privacy to be respected. And Signal would not have to engage in unsupported behavior that could potentially break down the line (imagine a future Windows where rendering to Recall and the screen is treated the same to simplify the code base and reduce bugs).
2. When I run software on my PC I am granting it permission to use my property to perform some task. If that program goes off and starts doing other things I may decide it is violating that trust and terminate it. That is my right as a PC owner. Signal is interfering with Recall's operation which doesn't really fit in with its basic premise as a messaging app and if it is not configurable this can be seen as sketchy behavior. Since they have announced this behavior publically it indicates it is not meant to be hidden behavior which does make the behavior more legitimate.
3. Apps should not claim that content that users can see cannot be permanently stored. This is at best naive and at worst a bold-faced lie. For example I could take a picture of my computer screen and Signal would never know. And of course the person being spoken too can remember what has been said. Users who are under the impression that what they say will have no consequences may end up behaving differently than if they were aware of the reality that anything they put "out there" may very well never go away.
If io_uring requires root then this is a nothingburger.
Raymond Chen, Microsoft developer, uses the phrase "It rather involved being on the other side of this airtight hatchway" to refer to such "exploits".
Microsoft will continue to offer security updates for Windows 10 through their paid support program. $30 per device for individuals for the next year of patches, $61 per device for businesses. It does sound like MS is not committing to more than a year, but it's another option.
Likewise, Microsoft is under no obligation to continue supporting obsolete revisions of their software for a small subset of their users' whims.
Users are free to migrate to Ubuntu or other alternative OSs to ensure they don't run the risk of being stuck on an unpatched, insecure version of Windows.
Reminds me of the time a Coca Cola employee tried to sell company secrets to Pepsi. They ratted on him and the FBI arrested him.
Yeah I don't know how these forced sales work, but you can be sure some of the bidders will fully intend push updates to all one billion installs to run ads or even worse crypto farmers or malware. Best case sale is probably to Microsoft who is invested in developing Chrome as well through Edge.
Of course that begs the question... if Google can't develop a web browser, why can Microsoft? Why can Apple?
Has a similar, but thankfully not as severe bug, where cheaters can trick other players' games into thinking BattleEye Anti-Cheat needs an update, so it boots them from the session and refuses to let them join another until they restart the game.
Of course there's another exploit to just crash the games of everyone in a session entirely which is the only thing that prevents this from being a big deal.
The gent who wakes up and finds himself a success hasn't been asleep.