● Covered by 2 sources · 4 reportsMedium impact
Microsoft's Global Device Identifier (GDID) Raises Privacy Concerns Amidst Hacking Case
Key points
- Microsoft GDID tracks Windows device installations.
- GDID linked to hacker's arrest in a federal case.
- Court records reveal GDID is non-disablable and persists in devices.
- Privacy issues raised over telemetry data collection.
Introduction to the GDID
The Global Device Identifier (GDID) has come under scrutiny following a federal complaint in a hacking case. The identifier is tied to Windows installations and persists across updates, acting as a unique fingerprint for each system linked to a Microsoft Account.
Linking the Hacker to GDID
Peter Stokes, a 19-year-old suspected hacker from Scattered Spider, was linked to his crimes through his GDID, as detailed in a U.S. DOJ complaint. The FBI used the identifier to connect his online activity to hacks, leveraging Microsoft’s telemetry data.
Privacy and Surveillance Concerns
The revelation of GDID usage in tracking and identifying Stokes has sparked privacy concerns. Critics highlight the non-disablable nature of GDID and its potential for being used in surveillance without user consent.
Importance of the Case
The use of GDID in legal investigations raises questions about user privacy and the ethics of telemetry in Windows. While Microsoft states the ID is crucial for functionality like activation, its forensic use has ignited debate over privacy versus security.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub cmc_internal/api GitHub github/collect GitHub SmtimesIWndr/gdid-reversal GitHub _private/browser GitHub get-started/accessibility GitHub search-github/github-code-searchHow outlets covered it
Microsoft has confirmed the existence of the Global Device Identifier (GDID) in Windows, a non-disablable ID linked to device-specific installations. This persistent identifier is used by the FBI to track individuals during investigations, illustrating its implications for privacy and security.
19-year-old Peter Stokes was extradited to the U.S. for cyber crimes, with his tracking linked to Microsoft Windows telemetry data. His Global Device Identifier and browsing history were instrumental in his identification, highlighting privacy concerns over telemetry features in Windows, particularly in Home and Professional editions.
A recent hacking case revealed that Microsoft can track Windows PCs using a Global Device ID. This capability has raised significant concerns about user surveillance practices, as the ID allows tracking of online activities without reliance on cookies.
The U.S. DOJ's complaint against an alleged hacker details Microsoft's Global Device Identifier (GDID), clarifying its generation and storage mechanism. This information highlights how Microsoft accounts manage device tracking and telemetry, affecting user privacy and security considerations.