Privacy

4803 readers

329 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

283

Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint (www.windowslatest.com)

submitted 2 days ago by unglueclass23@programming.dev to c/privacy@programming.dev

43 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] pulsewidth@lemmy.world 10 points 2 days ago (2 children)

When Windows provisions a device against a Microsoft Account, a system service called wlidsvc talks to login.live.com and gets back what Microsoft calls a Device PUID, a Passport Unique ID, inside the server’s SOAP response. Server assigned. Windows never computes it locally from anything on your PC. It receives a string and stores it.

It likely uses the motherboard's burned-in TPM module API to generate the unique hardware ID on, and associate with the account/license.

Bruv... it literally says exactly on the statement you quoted that the ID is generated by Microsoft, and explicitly that its not generated on the device. Why would you then go on to speculate that its generated on device by the TPM...?

AFAIK the TPM doesn't generate anything, its role is for storing cryptographic information - not creating it.

[–] 4am@lemmy.zip 4 points 2 days ago

Motherboard TPM sends a cryptographically verifiable serial number ID to Microsoft -> Microsoft generates a Device PUID (this ensures all DPUIDs are in the same format) -> Microsoft send generated DPUID back to the device which is stored within the TPM and is cryptographically verifiable to applications which wish to access and know it, and ensure it is genuine and authentic.

TPMs all have a unique identifier burned into them.

[–] artwork@lemmy.world 0 points 2 days ago

Please do consider checking out how TPM is actually used.