cross-posted from: https://tardigram.com/m/windows11@lemmy.world/t/39011

GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.

you are viewing a single comment's thread
view the rest of the comments
[–] 19 points 2 months ago (4 children)

I wonder how many other GDID type identifiers are out there, besides this Microsoft one.

  • source
  • hideshow 4 child comments
  • [–] 18 points 2 months ago* (1 child)

    I'd bet every proprietary OS and firmware (or open source base OS with deeply integrated proprietary software, such as anything Google makes) has something similar.

    For things like phones, an IMEI is already a permenantly attached unique ID tied to the modem. There is also a hardcoded serial number in most electronic devices.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 2 months ago (1 child)
  • [–] 3 points 2 months ago

    Most CPUs don't allow you to read the serial number anymore (from userspace at least, I'm sure there are ways of extracting it).

    Except Raspberry Pi for some reason, and for some other reason my coworker decided to use that as a device identifier for one of our services (devices we build and control, we're not just tracking random people). So now I guess we're stuck with raspberry pis for the near future. On any other device it just returns "ERR00000“.

  • source
  • parent