• 6 days

    Well shit.

    I have Linux, so I don’t gave that feature either! What am I supposed to do now? I want to be visible everywhere and tracked by everyone, but I had to chose Linux and again I’m left out!

    This sucks

    • I bet you don’t get those aggravating pop ups and ads either.

      You’re missing out on the typical PC user experience

      • That reminds me I want to try Windows 3 in a virtual machine just for fun. See how fast it boots

        • It always booted fast enough (well as fast as computers were then). It was pretty fucking useless though. Dos was still way more useful and efficient in those days.

          • True. Mom had a computer with Win 3.11 on it. I played on that thing for hours when I was younger. I played an unauthorized dos Star Trek game a lot.

            • I played the lights off that 25th anniversary edition one. Even more so when someone got the walkthrough for me off the ol local BBS

            • 5 days

              You just had to run the dos program of the office like tool you wanted and you had same GUI apps. Just was one app at a time, as it wasn’t q Windowed environment.

            • Office wasn’t in use as much back then, that was still Lotus and WordPerfect territory. DOS was ok if you knew how to really use it, and it took some learning. I’ve always been a simplicity over fancy UI kind of guy though, so maybe it was just me.

  • There are lots of unique identifiers in computers, not just Windows.

    MAC address, serial number, bios uuid.

    Linux even has /etc/machine-id

    • yes, but what secret undisclosed id systems, that weren’t definitevely known to exist untill legal proceedings ‘oopsied’ them into reality?

      • I mean if you have a phone in your pocket, you are completely dicked. I’m not saying we should be accepting it (dont), but it’s completely fucking hopeless right now. We are boxed in on all fronts.

        • I mean sure, if you’re fully running a mainline corporate phone and OS, with none of your own privacy or security measures utilized.

          I don’t think its really possible at this point to actually bring your signature and foot print down to literally 0, but you can do a fair deal of uh… privacy hygiene, to minimize those.

          It’s not totally hopeless. You… just have to actually learn how to actually be private, with technology. It’s not easy, but it is also not impossible.

          And that is just passive resistance, becoming un-surveillable, to a meaningful extent.

          • It takes a lot of finagling. People like you and me, we can minimize it. Custom Roms, PiHoles, VPN, onionized, etc. But the general joe? No chance.

            I also don’t fully 100% believe that there isn’t technology at this point that renders all of the above moot. We probably just don’t fully know about it all yet.

            • I don’t disagree… yeah. Shit ain’t looking good, but I refuse to simply give up.

  • I have a photo scanner I can’t get to work on Linux Mint, so I have an old laptop with Win10 on it for that single purpose. I haven’t booted it in months, but I do need to get back to that project.

    It doesn’t need or get internet access.

      • 6 days

        Is this one of those scam mails where you won something?

        • Oh No, no no no no, you just won a super pc gaming and all! Just send me your credit card number and I’ll figure out where to send it! Promise!

      • CachyOS has been phenomenal for me. Coming up on 7 months now without using windows beyond as a moonlight client on an ARM64 laptop (and windows server, because sysadmin gotta sysadmin.)

      • They should have stopped decades ago. Mint or Ubuntu are easier to install than Windows 2000 and way more powerful.

    • 7 days

      Your network interface has a permanent ID that follows you

          • 5 days

            I had a Samsung media player for the US market, its functions were super limited (music, video, images, shit games) compared to the Korean market release ( previous list, better games plus two player live Bluetooth games, subway maps for major global cities, multi language dictionaries. Note taking app, ecpanded themeing of interface)

            I found the firmware updater online, the Korean releasr OS version , and part of that process was just Editting the bluetooth MAC manually in a text file prior to reflashing…it was an eye opener to MAC/NIC stuff not being as locked down like all the software licensing vendors portrayed it was.

      • 7 days

        If that’s really a concern, USB or PCIe NICs are always an option as a replacement, whether temporary or permanent. More advanced users can create virtual connections to route traffic through (macvlans) with custom configurable MAC addresses and/or use virtual machines that offer the same feature if a guest OS is preferred or necessary.

        The identifier the article is talking about is instead persistent on any Windows OS regardless of hardware, including if the OS is a virtual machine. Using the OS at all on the Internet ensures Microsoft can always track it.

      • There is actually a Microsoft Linux distribution: Azure Linux (previously named CBL Mariner), based on Fedora. And funny enough, it’s initial release was appropriately on a April 1. Even Microsoft understood the joke, have to give them that.

  • Fuck this OS, left it behind a long time ago and nothing ever will bring me back. This platform should die, they turned everything good about the platform to trash over years.

    • 7 days

      I finally made the switch a couple of weeks ago. Running Cachyos and it’s a dream. I’m not going back to MS anytime soon. Now I dread work because I have to use that POS there.

  • Court filings in the Scattered Spider hacking case reveal Microsoft provided the FBI with a complete IP history tied to something called a Global Device ID (GDID)

    It’s kinda like a MAC address

    • Except the MAC address isn’t propagated through gateways, only on your local network(because that is their job).

        • We tossed systemd out the window on our Debian. Stuff broke when we removed /etc/machine-id.

          Turns out dbus ALSO uses it, but if it’s not in /etc, it makes its own at /var/lib/dbus/machine-id (which was symlinked to /etc/machine-id on our system).

          So we just wrote 00000000000000000000000000000000 to it instead. 🙃

          – Frost

        • 7 days

          Honestly not sure. I wouldn’t be surprised if it breaks something with D-Bus based on skimming the man pages, but I’ve never dug into it. Its not exposed in containers I run though, and I haven’t run into anything that broke there as a result… 🤷️

  • Your Windows PC Has a Permanent ID That Follows You – Even With a VPN

    Yes, it’s bad, but worth pointing out, they didn’t identify the user directly by somehow extracting GDID from their traffic, they identified them because their GDID happened to be in the same place at the same time at their hacking efforts that became statistically impossible to ignore.

    Realistically this kind of tracking could be accomplished with any software with a unique ID that does, say, daily update checks or usage pings. This one is just extra bad because it’s ubiquitous (on Windows) and almost impossible to change, so they have a 1-stop-shop for spying.

    • All tracking is done by amalgamating as many different overlapping signals and indicators together as you can, and then establishing basically a confidence score/threshold.

      This one is extra bad because it was never disclosed previously.

      Trust = Gone, what else is MSFT hiding?

    • 7 days

      I think the ngrok tunnel server they setup to exfiltrate data actually sent the GDID to the ngrok servers. This GDID was then linked to non-VPN IP logs by Microsoft.