Risks Digest 34.30

Colorado discovers error causing EV tax credit denials Architecture Scientists Find Security Risk in RISC-V Open-Source Chip Study finds 268% higher failure rates for Agile software projects The best video I've seen explaining the techical reasons why keeping AM radios in cars is so important! AI Systems Are Learning to Lie and Deceive Hamane's Ai Pin Microsoft's Jaime Teevan doubles down on Windows Recall's "Privacy sh*t-show" U.S. to open broad antitrust probe into AI giants PHP+Windows Vulnerability Annandale man wins fraud case against a bank Abridged info on RISKS ----------------------------------- Date: Sun, 9 Jun 2024 12:22:04 -0700 From: "Peter G. Neumann" <Peter. Date: Thu, 06 Jun 2024 12:55:23 +0000 From: Henry Baker <hbaker1 pipeline com> Subject: Microsoft's Jaime Teevan doubles down on Windows Recall's "Privacy sh*t-show" FYI - Clueless/tonedeaf at best, NSA/Chinese/Russian mole at worst, chief scientist and technical fellow at Microsoft Research Jaime Teevan doubles down on the new Windows "Recall" continuous keylogging "Bug-feature". Brynjolfsson said when Recall was announced, there was "Kind of a backlash against all the privacy challenges around that. So, talk about both the pluses and minuses of using all that data and some of the risks that creates and also some of the opportunities." This was clearly a popular topic. "This has come up throughout the morning as well the importance of data. And this AI revolution that we're in right now is really changing the way we understand data." She continued, "Microsoft generally helps large enterprises manage their data, create data, share data, and that data is really something that makes the business of work different in the context of generative AI."And as individuals too, we have important data, the data that we interact with all the time, and there's an opportunity to start thinking about how to do that and to start thinking about what it means to be able to capture and use that. Of course we are rethinking what data means and how we use it, how we value it, how it gets used. " *The Register* noted when Recall was introduced at Microsoft Build last month that the software which builds an archive of screenshots taken every few seconds and logs user activities, so that past actions can be recalled presents a significant privacy risk. As Stross argues, Windows PCs with Recall will be targeted by lawyers during discovery proceedings because they will provide access not just to email messages but conversations in any messaging or collaboration app, and possibly spoken conversations if speech-to-text data gets captured by Redmond's activity logger.