3 ms·
One more proof that Windows is malware.
by drnick1 3mo ago
One more proof that Windows is malware.
- ranger_danger 3mo agoLinux has the same kind of identifier at /etc/machine-id... readable by default by basically any application on the system.
- aftbit 3mo agoWhich is also well documented and trivially rotatable by anyone with root on the machine. How do you rotate the MS identifier?
- ranger_danger 3mo agohttps://github.com/gd03gd031/Windows-GDID-Changer https://github.com/gd03gd031/Windows-GDID-Changer > well documented and trivially rotatable Yes, but almost nobody does that or complains about it at all, even though applications may have been silently phoning it home for many years now.
- gruez 3mo ago>https://github.com/gd03gd031/Windows-GDID-Changer https://github.com/gd03gd031/Windows-GDID-Changer sounds like you can rotate it, but it doesn't really matter because the registration/rotation process sends a bunch of static information to microsoft, which means they can re-correlate the the old id back to the new id.
- ranger_danger 3mo agoSurely the sending of the GDID to MS can be blocked?
- aftbit 3mo agoWhich applications do this?
- rpdillon 3mo ago...and that can be changed at-will.
- ranger_danger 3mo agosame for the windows GDID
- drnick1 3mo agoThis is a systemd identifier, not strictly speaking a "Linux" identifier. In any case, an executable allowed to run on a host can trivially fingerprint the machine it is running on using a combination of hardware identifiers. Removing or rotating machine-id does not buy you any privacy against a malicious app. What I find most surprising in this story is how careless these "hackers" were. You would think that people engaged in this type of activities would use throwaway devices running free operating systems and VMs, not personal devices logged into Snapchat and Facebook.
- ranger_danger 3mo ago> Removing or rotating machine-id does not buy you any privacy against a malicious app. It absolutely can if that's the only identifier an app is looking at. > You would think that people engaged in this type of activities would use throwaway devices running free operating systems and VMs, not personal devices logged into Snapchat and Facebook. Well, the smart ones do that, which is why they don't make the news as they don't get caught.
- wolvoleo 3mo agoYou'd still need to have your system compromised by a malicious app to be tracked using that. On windows, it does that all by itself, Microsoft tracks you with it. Because windows is the malicious app just like the GP said.