Home / Technology / Microsoft's Hidden PC Tracker Exposed
Microsoft's Hidden PC Tracker Exposed
6 Jul
Summary
- Microsoft can track Windows PCs via Global Device ID.
- A teenage hacker's arrest revealed this tracking capability.
- The ID has no easy opt-out, raising surveillance fears.
Concerns over digital surveillance have intensified following the extradition of a 19-year-old hacker, Peter Stokes, from Europe. Microsoft played a crucial role in the investigation, using its "Global Device ID" (GDID) to link Stokes to alleged hacking crimes.
According to a criminal complaint unsealed last week, the FBI utilized Microsoft records, associating Stokes' IP address with a GDID. This identifier is described by Microsoft as a persistent, device-level ID uniquely identifying a Windows operating system installation across various services.
The revelation suggests Microsoft could potentially track a Windows PC's online activity without relying on third-party cookies. Evidence showed Stokes' GDID accessing specific web development tool pages and other sites, aiding in a suspected hack of a luxury jewelry retailer in May 2025.
Cybersecurity experts have labeled Windows as "surveillance software" due to this capability. While a GDID can theoretically be reset by reinstalling Windows, it is not a straightforward process, and Microsoft may still correlate new IDs with previous ones using other identifiers like account logins or IP addresses.
This discovery prompts broader questions about similar tracking capabilities across other major tech companies. Some users are actively seeking ways to manage or remove the GDID, while experts suggest using alternative operating systems like Linux for enhanced privacy.
