The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising privacy red flags about Windows' surveillance capabilities.
Why is there never any more detail how the GDID is then used to collect information?
The complaint says Microsoft had records showing that on May 12, 2025, at 19:21 UTC, the GDID associated with Stokes’ computer “accessed, among other ngrok pages, ‘https://dashboard[.]ngrok.com/signup,’ the ngrok page to set up an ngrok account.”
How do the records show a GDID in connection to the website?
Why is there never any more detail how the GDID is then used to collect information?
How do the records show a GDID in connection to the website?
Iirc other articles were specifying he was also using Edge AND had edge cloud sync or w/e enabled
Uh huh