Hacker Arrest Exposes Microsoft's Hidden User ID

A hacker's arrest has revealed that Microsoft utilizes a Global Device ID (GDID) to track users on Windows PCs. This identifier, which remains consistent even through operating system updates, was instrumental in linking a hacker's activity to their Windows device.

The discovery has raised privacy concerns, as the GDID appears capable of associating user activity with third-party services without a clear opt-out mechanism for Windows users. The criminal complaint against hacker Peter Stokes indicated that Microsoft could link a GDID to various services, including the times of access.

In response, the VPN provider Windscribe has developed an experimental script named deGDID. This tool aims to remove the GDID from Windows systems by deleting the identifier and blocking its regeneration. However, implementing deGDID can disrupt Microsoft account features such as device synchronization and Windows Hello, potentially breaking sign-ins for services like Xbox and Outlook.

Windscribe cautions that deGDID is highly experimental and carries risks, advising users to proceed with caution as it may disable certain Microsoft account functionalities. The company also notes that the script does not erase any pre-existing records Microsoft may hold. An ideal solution would involve Microsoft providing clearer information about GDID and offering users an opt-out option, but the company has not yet commented on the identifier.