Firefox Anti-Recall Mode

[Odisey25]

Proposal: Native "Recall Resistance" in Firefox

A privacy-first feature to block Microsoft Recall-like surveillance by default.
Core Idea:

Integrate low-level protections against screen capture, telemetry harvesting, and behavioral tracking (like Microsoft Recall) directly into Firefox’s privacy suite—leveraging existing anti-tracking systems.
Key Implementation Strategies

1. Hard-Block Recall/Telemetry Domains

   Expand Firefox’s Tracking Protection lists to automatically block:

    *.telemetry.microsoft.com
   
    *.recall.windows.com
   
    *.activity.windows.com
   

   Why? No extra extensions needed—uses Mozilla’s maintained blocklists.

2. API Restrictions for High-Risk Sites

   Automatically throttle or disable these APIs on Microsoft domains (e.g., Office 365, Azure):

    getDisplayMedia() (prevents silent screen capture).
   
    Canvas/WebAudio (limits fingerprinting).
   
    WebRTC (stops IP leaks).
   

   How? Reuse the permissions.default system (like camera/mic denials).

3. Auto-Contain Microsoft Services

   Treat Microsoft domains as high-risk by default:

    Force them into Firefox Containers (isolated sessions).
   
    Purge cookies/storage post-session (like Private Browsing).
   

4. "Recall Resistance" Toggle in about:config

   Add a master switch (e.g., privacy.resist_recall):

    Fakes harmless noise in telemetry data.
   
    Randomizes timestamps/mouse events to poison tracking.
   

5. Heuristic Detection of Recall-Like Activity

   Flag scripts that:

    Call getDisplayMedia() too frequently.
   
    Use keyloggers or excessive mouse-tracking.
   

   Bonus: Visual warning (🔒 icon in address bar) when detected.

Why Mozilla Should Do This

Differentiator: Firefox becomes the only browser explicitly blocking Recall-like features.

Leverages Existing Tech: Built on Tracking Protection, Containers, and about:config overrides.

User Trust: Reinforces Mozilla’s brand as privacy-first (vs. Chromium’s likely compliance with Recall).

Action Plan for Mozilla

Bugzilla Ticket:

    Title: "Proposal: Add Microsoft Recall protections to Tracking Protection"

    Tags: privacy, feature-request, anti-tracking.

//Prototype via user.js:

    // Block telemetry domains  
    user_pref("network.trr.blocklist", "*.telemetry.microsoft.com,*.recall.windows.com");  
    // Disable screen sharing on Microsoft sites  
    user_pref("permissions.default.getDisplayMedia", 2); // 2 = Deny  
    // Force Microsoft into Containers  
    user_pref("network.cookie.cookieBehavior", 4); // 4 = Containers  

Engage Communities:

    Discuss on #privacy (Mozilla Matrix/IRC).

    Rally support from privacy advocates (EFF, etc.).