The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising privacy red flags about Windows' surveillance capabilities.
  • Marija_@programming.dev
    3·
    7時間前

    Every time something like this comes out I’m reminded how much telemetry exists that most users never think about.

  • fubarx@lemmy.world
    4·
    14時間前

    Early iPhones all had unique UDIDs that were SDK accessible. It wasn’t long before it was used to connect location data to devices and devices with specific users. Apple’s solution was to yank it away from developers and go with an identifier the users could rescind and reset (the ADID). It still let apps track people, but there was always the risk users would reset it and break the chain of data gathering.

    The real solution is to limit access to the information as-needed. Like for maintenance, or warranty repairs. Everybody else can go pound sand. In the desktop/laptop world, a lot of hardware vendors just blithely let anyone access unique hardware IDs, which leads to the same privacy outcome.

  • refalo@programming.dev
    2·
    15時間前

    Linux distros have the same kind of device ID mechanism (/etc/machine-id or /var/lib/dbus/machine-id)… the only difference is how applications use it.

  • Telorand@reddthat.com
    35·
    1日前

    Y’all are probably tired of hearing it, but Linux has come a long way, especially for gaming; spin up a VM and try a few distros out.

    • Phoenixz@lemmy.ca
      14·
      1日前

      I’ve used Linux desktop for over 25 years now

      It was mostly ready for all that time. I installed KDE Linux on my mother in law’s computer for basic browsing and games like solitaire 15 years ago. She was in her late 60s and loved using it for almost a decade.

      Linux today is not “ready”, it’s the only serious choice for an operating system for everyone

      • Telorand@reddthat.com
        3·
        1日前

        Yep, I installed Aurora on an aging parent’s laptop, because I was worried they’d be the target of some well-crafted malware campaign (hence why I went atomic). Plus the parent doesn’t have good privacy practice, and I know Microsoft was datamining everything they were doing.

    • slazer2au@lemmy.worldEnglish
      4·
      1日前

      Start with Debian to be stable for a learning experience, then to Fedora to play around, finally Arch when the neck beard grows in.

  • unskilled5117@feddit.orgEnglish
    11·
    1日前

    Why is there never any more detail how the GDID is then used to collect information?

    The complaint says Microsoft had records showing that on May 12, 2025, at 19:21 UTC, the GDID associated with Stokes’ computer “accessed, among other ngrok pages, ‘https://dashboard[.]ngrok.com/signup,’ the ngrok page to set up an ngrok account.”

    How do the records show a GDID in connection to the website?

  • FiniteBanjo@programming.dev
    4·
    1日前

    TBF nVidia and Intel components supposedly had the same sort of capability for many years now: unique device ids.

    But yeh, fuck windowsm