Live data from Hacker News

Deletes all instances of Microsoft's GDID and prevents minting of new ones

github.com

1–10 of 66 posts

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#3
post #2

Wouldn't it make more sense to instead use the same GDID on thousands of hosts? Or a random GDID on each read? No GDID sounds like it sticks out a lot more.

Or recreate it on every boot :)

For example, it you are paranoid about Linux's /var/lib/dbus/machine-id file you can easily use dbus-uuidgen(1) to re-create it on shutdown.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#4
while it'd be nice for your paranoia to believe this id key is used for surveillance, it's more likely they just use the same type of finger printing that browsers use.

There's zero way to onion.route your internet connection information, unless you plan to go nowhere and do nothing.

Sure, it's worth to highlight privacy-potential-invasions, but the idea that you'll some how escape notice by changing the gdid is short sighted navel gazing.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#5

while it'd be nice for your paranoia to believe this id key is used for surveillance, it's more likely they just use the same type of finger printing that browsers use. There's zero way to onion.route your internet connection information, unless you plan to go nowhere and do nothing. Sure, it's worth to highlight privacy-potential-invasions, but the idea that you'll some how escape notice by changing the gdid is shor…

There is literally court documents showing this was used by surveilling in at least one case. How that is paranoia

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#6
post #5

while it'd be nice for your paranoia to believe this id key is used for surveillance, it's more likely they just use the same type of finger printing that browsers use. There's zero way to onion.route your internet connection information, unless you plan to go nowhere and do nothing. Sure, it's worth to highlight privacy-potential-invasions, but the idea that you'll some how escape notice by changing the gdid is shor…

There is literally court documents showing this was used by surveilling in at least one case. How that is paranoia

Could you share more context and details?

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#7
Windows has a hardcoded list of Microsoft domain names that entirely bypass the hosts file. I see nothing about this, so I would assume there is no countermeasure here. Curiously, this approach appears to have been tested as working anyway.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#8
post #6
post #5

Earlier quoted context omitted.

There is literally court documents showing this was used by surveilling in at least one case. How that is paranoia

Could you share more context and details?

https://www.windowslatest.com/2026/07/10/you-cant-fully-disa...

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#9
post #6
post #5

Earlier quoted context omitted.

There is literally court documents showing this was used by surveilling in at least one case. How that is paranoia

Could you share more context and details?

You might've missed this recent story where the FBI was able to identify an alleged teenage member of the Scattered Spider hacking group using the Microsoft GDID, and made an arrest:

https://news.ycombinator.com/item?id=48815196

https://news.ycombinator.com/item?id=48920338

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#10
post #6
post #5

Earlier quoted context omitted.

There is literally court documents showing this was used by surveilling in at least one case. How that is paranoia

Could you share more context and details?

https://www.ghacks.net/2026/07/12/microsoft-confirms-windows...
Post reply on HN