this post was submitted on 11 Jul 2026
52 points (100.0% liked)

Windows 11

1225 readers
2 users here now

Welcome to the community for Windows 11, Microsoft's latest computer operating system.

Rules:

founded 3 years ago
MODERATORS
 

GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.

you are viewing a single comment's thread
view the rest of the comments
[–] Maxxie@piefed.blahaj.zone 8 points 2 weeks ago

Microsoft’s records showed that at that exact same minute, a Windows device carrying GDID g:6755467234350028 had visited the ngrok signup page. Three hours later, the same GDID visited the retailer’s own website, through the same Tzulo proxy address used to set up the ngrok account. It gave the FBI a device, that don’t rotate the way VPN exit nodes do.

I'm not surprised MS fingerprints everything, what is insane is that their telemetry has most if not all outgoing network requests. They literally have your browser history. Better actually, because it includes non-browser activity too.

crazy.