Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
cm0002 ( cm0002@lemdro.id )  to Privacy@programming.devEnglish · 4 months ago

A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID

www.pcmag.com

external-link
message-square
12
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
  • hackernews@lemmy.bestiver.se
61
external-link

A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID

www.pcmag.com

cm0002 ( cm0002@lemdro.id )  to Privacy@programming.devEnglish · 4 months ago
message-square
12
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
  • hackernews@lemmy.bestiver.se
The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising privacy red flags about Windows' surveillance capabilities.
alert-triangle
You must log in or # to comment.
  • Telorand ( Telorand@reddthat.com ) 
    link
    fedilink
    arrow-up
    21
    ·
    4 months ago

    Y’all are probably tired of hearing it, but Linux has come a long way, especially for gaming; spin up a VM and try a few distros out.

    • Phoenixz ( phoenixz@lemmy.ca ) 
      link
      fedilink
      arrow-up
      11
      ·
      4 months ago

      I’ve used Linux desktop for over 25 years now

      It was mostly ready for all that time. I installed KDE Linux on my mother in law’s computer for basic browsing and games like solitaire 15 years ago. She was in her late 60s and loved using it for almost a decade.

      Linux today is not “ready”, it’s the only serious choice for an operating system for everyone

      • Telorand ( Telorand@reddthat.com ) 
        link
        fedilink
        arrow-up
        2
        ·
        4 months ago

        Yep, I installed Aurora on an aging parent’s laptop, because I was worried they’d be the target of some well-crafted malware campaign (hence why I went atomic). Plus the parent doesn’t have good privacy practice, and I know Microsoft was datamining everything they were doing.

  • altphoto ( altphoto@lemmy.today ) 
    link
    fedilink
    arrow-up
    9
    ·
    4 months ago

    That’s why all my devices running that piece of shit stay at work. Far away from my network.

  • unskilled5117 ( unskilled5117@feddit.org ) 
    link
    fedilink
    English
    arrow-up
    7
    ·
    4 months ago

    Why is there never any more detail how the GDID is then used to collect information?

    The complaint says Microsoft had records showing that on May 12, 2025, at 19:21 UTC, the GDID associated with Stokes’ computer “accessed, among other ngrok pages, ‘https://dashboard[.]ngrok.com/signup,’ the ngrok page to set up an ngrok account.”

    How do the records show a GDID in connection to the website?

    • cm0002 ( cm0002@lemdro.id ) OP
      link
      fedilink
      English
      arrow-up
      8
      ·
      4 months ago

      Iirc other articles were specifying he was also using Edge AND had edge cloud sync or w/e enabled

      • Phoenixz ( phoenixz@lemmy.ca ) 
        link
        fedilink
        arrow-up
        8
        ·
        4 months ago

        hacker

        Uh huh

  • FiniteBanjo ( FiniteBanjo@programming.dev ) 
    link
    fedilink
    arrow-up
    5
    ·
    4 months ago

    TBF nVidia and Intel components supposedly had the same sort of capability for many years now: unique device ids.

    But yeh, fuck windowsm

  • Tollana1234567 ( Tollana1234567@lemmy.today ) 
    link
    fedilink
    arrow-up
    2
    ·
    4 months ago

    MS is part of the surveillance tech that leo uses.

  • tremble5218 ( tremble5218@programming.dev ) 
    link
    fedilink
    arrow-up
    2
    ·
    4 months ago

    Hardly surprising. Fuck Microslop!

  • Marija_ ( Marija_@programming.dev ) 
    link
    fedilink
    arrow-up
    2
    ·
    4 months ago

    Every time something like this comes out I’m reminded how much telemetry exists that most users never think about.

  • refalo ( refalo@programming.dev ) 
    link
    fedilink
    arrow-up
    1
    ·
    4 months ago

    Linux distros have the same kind of device ID mechanism (/etc/machine-id or /var/lib/dbus/machine-id)… the only difference is how applications use it.

Privacy@programming.dev

privacy@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@programming.dev

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 212 users / day
  • 482 users / week
  • 1.3K users / month
  • 3.94K users / 6 months
  • 34 local subscribers
  • 5.33K subscribers
  • 1.94K Posts
  • 7.05K Comments
  • Modlog
  • mods:
  • Ategon ( Ategon@programming.dev ) 
  • danielintempesta ( danielintempesta@programming.dev ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code