4 ms·

> The ID is generated when Windows is set up with a Microsoft Account So not only was this “hacker” using Windows and Edge, they singed in to windows with a M

by 14u2c 3mo ago

> The ID is generated when Windows is set up with a Microsoft Account So not only was this “hacker” using Windows and Edge, they singed in to windows with a Microsoft account. And then used that same computer for their social media. Nice.

crtasm 3mo ago
The ID is generated even if you only create a local user account. I don't know to what extent that affects tracking/telemetry though.
steve1977 3mo ago
It's fascinating, right? I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.
- ffaccount2 3mo ago
  That's what hackers do in popular stories, right? In reality, most cybercriminsls just don't care that much (they usually use Tor browser, though). I mean they mostly use discord and telegram (both unencrypted). Serious "hackers" are usually state sponsored now, or members of mature groups.
  - Cider9986 3mo ago
    They don't care, I would say they don't know. I saw an article where they analyzed the leaked IP addresses from a breach forum, and some of the top ten were Surfshark and iCloud Private relay.
    - gruez 3mo ago
      >and some of the top ten were Surfshark and iCloud Private relay. what's wrong with icloud private relay? It uses a 2-hop architecture so it's probably more private than any single-hop VPN.
      - Cider9986 3mo ago
        It's good, but it's funny to think about cybercriminals running Safari and an iCloud+ Apple account.
- Cider9986 3mo ago
  Qubes is probably the best option but, the last time I checked, it didn't have certain deniability features that someone with the feds in their threat model might prefer. Personally I'd say use Qubes because it might be better at preventing you from getting raided in the first place. Decisions decisions.

by 14u2c 3mo ago

crtasm 3mo ago

The ID is generated even if you only create a local user account. I don't know to what extent that affects tracking/telemetry though.

steve1977 3mo ago

It's fascinating, right? I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

ffaccount2 3mo ago
That's what hackers do in popular stories, right? In reality, most cybercriminsls just don't care that much (they usually use Tor browser, though). I mean they mostly use discord and telegram (both unencrypted). Serious "hackers" are usually state sponsored now, or members of mature groups.
- Cider9986 3mo ago
  They don't care, I would say they don't know. I saw an article where they analyzed the leaked IP addresses from a breach forum, and some of the top ten were Surfshark and iCloud Private relay.
  - gruez 3mo ago
    >and some of the top ten were Surfshark and iCloud Private relay. what's wrong with icloud private relay? It uses a 2-hop architecture so it's probably more private than any single-hop VPN.
    - Cider9986 3mo ago
      It's good, but it's funny to think about cybercriminals running Safari and an iCloud+ Apple account.
Cider9986 3mo ago
Qubes is probably the best option but, the last time I checked, it didn't have certain deniability features that someone with the feds in their threat model might prefer. Personally I'd say use Qubes because it might be better at preventing you from getting raided in the first place. Decisions decisions.