Microsoft confirms Windows GDID device identifier that cannot be disabled • Hacker News Board

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#21

Post by steve1977 » Wed, Jul 15, 2026, 4:04 PM UTC

14u2c wrote: post #6

> The ID is generated when Windows is set up with a Microsoft Account So not only was this “hacker” using Windows and Edge, they singed in to windows with a Microsoft account. And then used that same computer for their social media. Nice.

It's fascinating, right?

I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#22

Post by ranger_danger » Wed, Jul 15, 2026, 4:08 PM UTC

1970-01-01 wrote: post #15

>The Global Device Identifier (GDID) is a permanent ID assigned when Windows provisions against a Microsoft Account. So again, the "make an account" is the part you ALWAYS skip. Local accounts or it technically isn't even a PC anymore.

The article is misleading... the GDID is created even if you don't use a Microsoft account.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#23

Post by ranger_danger » Wed, Jul 15, 2026, 4:10 PM UTC

drnick1 wrote: post #14

One more proof that Windows is malware.

Linux has the same kind of identifier at /etc/machine-id... readable by default by basically any application on the system.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#24

Post by ffaccount2 » Wed, Jul 15, 2026, 4:10 PM UTC

steve1977 wrote: post #21

14u2c wrote: post #6

> The ID is generated when Windows is set up with a Microsoft Account So not only was this “hacker” using Windows and Edge, they singed in to windows with a Microsoft account. And then used that same computer for their social media. Nice.

It's fascinating, right? I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

That's what hackers do in popular stories, right? In reality, most cybercriminsls just don't care that much (they usually use Tor browser, though). I mean they mostly use discord and telegram (both unencrypted).

Serious "hackers" are usually state sponsored now, or members of mature groups.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#25

Post by Cider9986 » Wed, Jul 15, 2026, 4:12 PM UTC

steve1977 wrote: post #21

14u2c wrote: post #6

> The ID is generated when Windows is set up with a Microsoft Account So not only was this “hacker” using Windows and Edge, they singed in to windows with a Microsoft account. And then used that same computer for their social media. Nice.

It's fascinating, right? I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

Qubes is probably the best option but, the last time I checked, it didn't have certain deniability features that someone with the feds in their threat model might prefer.

Personally I'd say use Qubes because it might be better at preventing you from getting raided in the first place.

Decisions decisions.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#26

Post by aftbit » Wed, Jul 15, 2026, 4:12 PM UTC

ranger_danger wrote: post #23

drnick1 wrote: post #14

One more proof that Windows is malware.

Linux has the same kind of identifier at /etc/machine-id... readable by default by basically any application on the system.

Which is also well documented and trivially rotatable by anyone with root on the machine. How do you rotate the MS identifier?

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#27

Post by VCFundedGenYer » Wed, Jul 15, 2026, 4:12 PM UTC

VerifiedReports wrote: post #13

ndiddy wrote: post #10

Earlier quoted context omitted.

Edge has a feature where it will periodically pull the bookmarks and browsing history from any other browsers you have installed, so they'll then get sent to Microsoft and associated with your Microsoft account. This was initially enabled by default without the user's consent, although I believe now you may have to opt into it if you do a fresh Windows install. I only realized this was a thing because one time my wor…

"Old" people? How about the vast majority of the public, which is not represented on HN? Not to mention that one of the many major UI regressions in Windows is the removal of title bars from application windows, which is fundamental to this "trick." Try opening a PDF in Edge and also in Acrobat. Neither window has a title bar, and they are otherwise almost identical. You have to scrutinize the very few controls aroun…

Edge has less browser market share than Firefox right now, it's not the "vast majority."

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#28

Post by Cider9986 » Wed, Jul 15, 2026, 4:14 PM UTC

ffaccount2 wrote: post #24

steve1977 wrote: post #21

Earlier quoted context omitted.

It's fascinating, right? I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

That's what hackers do in popular stories, right? In reality, most cybercriminsls just don't care that much (they usually use Tor browser, though). I mean they mostly use discord and telegram (both unencrypted). Serious "hackers" are usually state sponsored now, or members of mature groups.

They don't care, I would say they don't know.

I saw an article where they analyzed the leaked IP addresses from a breach forum, and some of the top ten were Surfshark and iCloud Private relay.

Re: Microsoft confirms Windows GDID device identifier that cannot be disabled

#29

Post by rpdillon » Wed, Jul 15, 2026, 4:16 PM UTC

ranger_danger wrote: post #23

drnick1 wrote: post #14

One more proof that Windows is malware.

Linux has the same kind of identifier at /etc/machine-id... readable by default by basically any application on the system.