• lazynooblet@lazysoci.al
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 hours ago

    There are lots of unique identifiers in computers, not just Windows.

    MAC address, serial number, bios uuid.

    Linux even has /etc/machine-id

    • sp3ctr4l@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      5
      ·
      2 hours ago

      yes, but what secret undisclosed id systems, that weren’t definitevely known to exist untill legal proceedings ‘oopsied’ them into reality?

  • Ludicrous0251@piefed.zip
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    6 hours ago

    Your Windows PC Has a Permanent ID That Follows You – Even With a VPN

    Yes, it’s bad, but worth pointing out, they didn’t identify the user directly by somehow extracting GDID from their traffic, they identified them because their GDID happened to be in the same place at the same time at their hacking efforts that became statistically impossible to ignore.

    Realistically this kind of tracking could be accomplished with any software with a unique ID that does, say, daily update checks or usage pings. This one is just extra bad because it’s ubiquitous (on Windows) and almost impossible to change, so they have a 1-stop-shop for spying.

    • sp3ctr4l@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      2 hours ago

      All tracking is done by amalgamating as many different overlapping signals and indicators together as you can, and then establishing basically a confidence score/threshold.

      This one is extra bad because it was never disclosed previously.

      Trust = Gone, what else is MSFT hiding?

    • x00z@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 hours ago

      I think the ngrok tunnel server they setup to exfiltrate data actually sent the GDID to the ngrok servers. This GDID was then linked to non-VPN IP logs by Microsoft.

  • ZkhqrD5o@lemmy.world
    link
    fedilink
    English
    arrow-up
    33
    ·
    10 hours ago

    Fuck this OS, left it behind a long time ago and nothing ever will bring me back. This platform should die, they turned everything good about the platform to trash over years.

  • NirodhaAvidya@lemmy.world
    link
    fedilink
    English
    arrow-up
    23
    ·
    9 hours ago

    Court filings in the Scattered Spider hacking case reveal Microsoft provided the FBI with a complete IP history tied to something called a Global Device ID (GDID)

    It’s kinda like a MAC address

  • thingsiplay@lemmy.ml
    link
    fedilink
    English
    arrow-up
    4
    ·
    9 hours ago

    Does this only apply to Windows 11 or also to 10? I know the ID even works if you installed Windows on a virtual machine. I’m on Linux, but I have Windows 10 installed for very specific tasks (in example to update firmware of my 8bitdo gamepad and configure its settings, because they suck and don’t provide a Linux tool for this).

    • Sneezycat@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      2 hours ago

      I have a comment about updating the 8bitdo firmware on Linux, maybe it’ll help you… Let me look it up.

      Edit: here you go! Good luck :P

      • thingsiplay@lemmy.ml
        link
        fedilink
        English
        arrow-up
        7
        ·
        8 hours ago

        You mean the firmware can be updated over the browser?? Well, I use Firefox and they don’t support Firefox. Another L from 8bitdo. (But thanks for the link nontheless!)

        • iamthetot@piefed.ca
          link
          fedilink
          English
          arrow-up
          2
          ·
          3 hours ago

          Surely using a chromium browser just for this is better than having a whole windows VM just for this.

        • jaygray91@piefed.zip
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          7 hours ago

          clicking through that link, it obviously blocks my zen browser, and recommends google’s chrome, chromium, ms edge and opera.

          this seems like a massive L still. hopefully it’s not hard-coded to require those 4 only, and a stripped down chromium browser can be used. I don’t have a race in this horse yet, becauseI did consider 8bitdo controllers once my gamesir controller dies. maybe I’ll just have to save up for a steam controller, even though Valve still doesn’t ship to my country, and I refuse to buy from scalpers. even legit businesses here are scalping hard… fucking scalpers.

          my first draft comment to you was a bit hopeful that maybe stripped down chromium browsers can replace your singular use windows VM. I apologize for assuming

            • MouldyCat@feddit.uk
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              19 minutes ago

              I guess someone needs to try with up-to-date Firefox and a spoofed Chrome user agent string

          • thingsiplay@lemmy.ml
            link
            fedilink
            English
            arrow-up
            4
            ·
            6 hours ago

            As for the Steam Controller, I have purchased it and want to warn you about something. The controller is designed to work only as a controller, when Steam is running. Which is a deal breaker to use it outside Steam for me, because I don’t want to have it running in the background when not playing on Steam. So I end up using it in Steam only. There are third party efforts for drivers to make it usable without Steam, but they have all their own quirks. However the SDL 3 library now supports Steam Controller. So any application updating to SDL 3 comes with free Steam Controller native support, in example RetroArch.

          • thingsiplay@lemmy.ml
            link
            fedilink
            English
            arrow-up
            3
            ·
            6 hours ago

            Thanks for the suggestion, but I’m not taking a risk with firmware updates. Also I already have a virtual machine setup for this.