GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.
Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint
3 months ago by Juanro49 to c/windows11
Maxxie 9 points 3 months ago
Microsoft’s records showed that at that exact same minute, a Windows device carrying GDID g:6755467234350028 had visited the ngrok signup page. Three hours later, the same GDID visited the retailer’s own website, through the same Tzulo proxy address used to set up the ngrok account. It gave the FBI a device, that don’t rotate the way VPN exit nodes do.
I'm not surprised MS fingerprints everything, what is insane is that their telemetry has most if not all outgoing network requests. They literally have your browser history. Better actually, because it includes non-browser activity too.
crazy.
windows11
@lemmy.world
1250
247
104
Welcome to the community for Windows 11, Microsoft's latest computer operating system.
Rules:
- Do not promote pirated content or grey market keys.
- Be civil. No rude, offensive, or hateful posts/comments.
go to feed...
windows11
@lemmy.world
1250
247
104
Welcome to the community for Windows 11, Microsoft's latest computer operating system.
Rules:
- Do not promote pirated content or grey market keys.
- Be civil. No rude, offensive, or hateful posts/comments.
go to feed...
So bad opsec helps catch bad actor. Tale as old as time.
save