Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Deletes all instances of Microsoft's GDID and prevents minting of new ones

github.com

Post reply on HN
Print view View original

51–60 of 66 posts

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#51

Post by yegor »

userbinator wrote: post #15

"The mutation path", "the fully lab-validated line. Other accepted builds warn.", "Status can still inspect", "command, verdict, exit code", "device-identity rehydrate sources", "the network gate", "real-shaped PUID"? WTF. That was extremely difficult to read. I'm assuming it's LLMese (I've had less trouble with reading the writing of ESL'ers), but one of the strangest dialects of it I've ever seen. It has the flavou…

Repo "author" here. That's just my custom instructions in the IDE, sometimes they result in hilarious docs, sometimes less so. Using GPT Sol for this project, and Fable for review.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#52

Post by WalterGR »

Melatonic wrote: post #45
Retr0id wrote: post #25

Earlier quoted context omitted.

> you'll have to unlearn your muscle memory of the Ctrl key There is another option, which is to use Karabiner to revert to PC-like shortcuts. Learning the mac way is probably better if you plan to use mac exclusively, but I was triple-wielding macos+windows+linux for a period and I wanted my muscle memory to work across all of them.

Aren't a lot kg the mac ones just Command plus the same button ? My brain has learned pretty well to code switch between OS at this point. It's actually really too bad MacOS doesn't have some of the windows key shortcuts like "windows key + arrow key". Would be super useful.

> It's actually really too bad MacOS doesn't have some of the windows key shortcuts like "windows key + arrow key". Would be super useful.

Right this way, sir/madam:

“Mac window tiling icons & keyboard shortcuts”

https://support.apple.com/guide/mac-help/mac-window-tiling-i...

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#53

Post by vetrom »

exceptione wrote: post #31
vetrom wrote: post #21

Earlier quoted context omitted.

Run say a linux firewall vm with PCI nic passthrough and give the host windows machine a virtio-pci/TAP interface as its network access is one countermeasure off the top of my head I can think of.

Agreed, running it inside a vm is how you would treat any other malware. Why pci passtrough instead of a regular virtio network driver though?

I'm imagining a situation where you need to run windows on the host, but you do not want windows itself arbitrating network access -- so you pass through the real NIC to the vm, and route through the vm with a virtio (I think TAP is actually the only option host-side though but still) NIC.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#54

Post by xingped »

Retr0id wrote: post #25
cadamsdotcom wrote: post #18

Sharing in the hope it helps even one person on the fence to convert. C. 2012 I swore never to use Windows again, and I've managed it! It is possible - macOS is really good (you'll have to unlearn your muscle memory of the Ctrl key) and Linux gaming has come a long way. If using Windows professionally, consider installing it in a VM on your mac or linux box, then asking your agent to set up scripts that remote to to…

> you'll have to unlearn your muscle memory of the Ctrl key There is another option, which is to use Karabiner to revert to PC-like shortcuts. Learning the mac way is probably better if you plan to use mac exclusively, but I was triple-wielding macos+windows+linux for a period and I wanted my muscle memory to work across all of them.

Y'all really overcomplicate stuff. Redefining/switching cmd and ctrl is a basic and easy to find option in Mac settings.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#55

Post by tomhow »

isdononthephone wrote: post #28
gruez wrote: post #26

Earlier quoted context omitted.

>Why not create a new HN account for every post? Your profile: >created: 1 day ago

[flagged]

It's so notable how people who try to attack HN often have very little idea of its character. HN has not been heavily frequented by startup founders hunting VC money for at least 15 years.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#56

Post by dgellow »

future10se wrote: post #9
dgellow wrote: post #6

Earlier quoted context omitted.

Could you share more context and details?

You might've missed this recent story where the FBI was able to identify an alleged teenage member of the Scattered Spider hacking group using the Microsoft GDID, and made an arrest: https://news.ycombinator.com/item?id=48815196 https://news.ycombinator.com/item?id=48920338

Thanks! I did miss it

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#57

Post by LoganDark »

jasonjayr wrote: post #12
LoganDark wrote: post #7

Windows has a hardcoded list of Microsoft domain names that entirely bypass the hosts file. I see nothing about this, so I would assume there is no countermeasure here. Curiously, this approach appears to have been tested as working anyway.

Is there anyone maintaining a canonical list of such domains and hosts? This would be useful to add as firewall rules on a router upstream of any windows hosts, or to a pihole.

Here's one from a couple years back: https://petri.com/windows-10-ignoring-hosts-file-specific-na...

AFAICT it has not changed.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#58

Post by Retr0id »

xingped wrote: post #54
Retr0id wrote: post #25

Earlier quoted context omitted.

> you'll have to unlearn your muscle memory of the Ctrl key There is another option, which is to use Karabiner to revert to PC-like shortcuts. Learning the mac way is probably better if you plan to use mac exclusively, but I was triple-wielding macos+windows+linux for a period and I wanted my muscle memory to work across all of them.

Y'all really overcomplicate stuff. Redefining/switching cmd and ctrl is a basic and easy to find option in Mac settings.

You can't get from Mac-style shortcuts to PC-style shortcuts just by reassigning individual keys. If you swapped them then Ctrl+C would no longer emit a terminal break, for example.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#59

Post by GoblinSlayer »

userbinator wrote: post #50
happosai wrote: post #14

Earlier quoted context omitted.

Trying to make windows work differently than what Microsoft wants is a losing proposition. It would make more sense just not use windows to begin with.

Vibe-coding a sufficiently compatible replacement seems increasingly possible. ReactOS and WINE can either get on board, or if they still try their IP pearl-clutching, I suspect they'll be replaced by something else. Bonus points for using Copilot to do it.

I wonder what will happen if Copilot just recalls all windows code from memory.

Re: Deletes all instances of Microsoft's GDID and prevents minting of new ones

#60

Post by exceptione »

vetrom wrote: post #53
exceptione wrote: post #31

Earlier quoted context omitted.

Agreed, running it inside a vm is how you would treat any other malware. Why pci passtrough instead of a regular virtio network driver though?

I'm imagining a situation where you need to run windows on the host, but you do not want windows itself arbitrating network access -- so you pass through the real NIC to the vm, and route through the vm with a virtio (I think TAP is actually the only option host-side though but still) NIC.

Ah, I see. Given that you can even pass disks, gpu's, usb devices etc via pci, I would always choose the opposite route: run windows in a vm.
Post reply on HN