Wasn't this the GUID (Globally Unique Identifier) of early 00s Windows? When did it change to GDID? Are they the same?
Maybe try reading the writeup? GDID's are 64 bit for one thing, not 128 like GUIDs.
Full Writeup of the Windows GDID
41–50 of 57 posts
Re: Full Writeup of the Windows GDID
#42AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…
Re: Full Writeup of the Windows GDID
#43AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…
Very interesting. Some users have been deleting the entire IrisService in the registry, it appears to also be related to the systray icons on the taskbar. The first link is a couple years old but the second one is from a couple months ago. Apparently triggered now by the latest update kb5094126, so there may be some questionable new changes going on in this particular monkey-business department: https://gist.github.c…
Re: Full Writeup of the Windows GDID
#44Re: Full Writeup of the Windows GDID
#45is there a mac equivalent to the windows GDID?
Re: Full Writeup of the Windows GDID
#461) Do we think this is actually how the FBI found this kid or is this simply what they're saying in order to keep some other tool hidden?
2) Is there a way to block or manually change the GDID from being revealed. If it's the browser leaking it, do all browsers leak it?
Re: Full Writeup of the Windows GDID
#47Earlier quoted context omitted.
This isn't "tracking", this is attribution in a court. The defence can't stand there and say "That's not him/this device" when the forensics point exactly at it.
It's still tracking. Just like tracking your car movements to attribute them to you is still tracking.
Re: Full Writeup of the Windows GDID
#48AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…
Very interesting. Some users have been deleting the entire IrisService in the registry, it appears to also be related to the systray icons on the taskbar. The first link is a couple years old but the second one is from a couple months ago. Apparently triggered now by the latest update kb5094126, so there may be some questionable new changes going on in this particular monkey-business department: https://gist.github.c…
Re: Full Writeup of the Windows GDID
#49So can you change/spoof your GDID easily?
Re: Full Writeup of the Windows GDID
#50Couple questions: 1) Do we think this is actually how the FBI found this kid or is this simply what they're saying in order to keep some other tool hidden? 2) Is there a way to block or manually change the GDID from being revealed. If it's the browser leaking it, do all browsers leak it?