Live data from Hacker News

Full Writeup of the Windows GDID

github.com

41–50 of 57 posts

Re: Full Writeup of the Windows GDID

#42
post #33

AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…

[deleted]

Re: Full Writeup of the Windows GDID

#43
post #33

AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…

Very interesting. Some users have been deleting the entire IrisService in the registry, it appears to also be related to the systray icons on the taskbar. The first link is a couple years old but the second one is from a couple months ago. Apparently triggered now by the latest update kb5094126, so there may be some questionable new changes going on in this particular monkey-business department: https://gist.github.c…

[deleted]

Re: Full Writeup of the Windows GDID

#46
Couple questions:

1) Do we think this is actually how the FBI found this kid or is this simply what they're saying in order to keep some other tool hidden?

2) Is there a way to block or manually change the GDID from being revealed. If it's the browser leaking it, do all browsers leak it?

Re: Full Writeup of the Windows GDID

#47

Earlier quoted context omitted.

This isn't "tracking", this is attribution in a court. The defence can't stand there and say "That's not him/this device" when the forensics point exactly at it.

It's still tracking. Just like tracking your car movements to attribute them to you is still tracking.

To be fair, the courts in USA apparently have a different definition of tracking than all normal people do. Speaking of car movements, Flock claims this isn't tracking people based on some legalese mumbojumbo. Obviously, this and GPs claims are absolutely ridiculous if you speak English, but are apparently true in american legalese doublespeak.

Re: Full Writeup of the Windows GDID

#48
post #33

AI-generated "research" once more. How can anyone call it full writeup? As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like. 1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\…

Very interesting. Some users have been deleting the entire IrisService in the registry, it appears to also be related to the systray icons on the taskbar. The first link is a couple years old but the second one is from a couple months ago. Apparently triggered now by the latest update kb5094126, so there may be some questionable new changes going on in this particular monkey-business department: https://gist.github.c…

Windows GDID Changer:

https://news.ycombinator.com/item?id=48818707

Re: Full Writeup of the Windows GDID

#50

Couple questions: 1) Do we think this is actually how the FBI found this kid or is this simply what they're saying in order to keep some other tool hidden? 2) Is there a way to block or manually change the GDID from being revealed. If it's the browser leaking it, do all browsers leak it?

Windows GDID Changer:

https://news.ycombinator.com/item?id=48818707

Post reply on HN