Molokroid
kiwifarms.net
- Joined
- Jul 4, 2022
Is there any more info on how the GDID is actually exposed to the wider web and websites? There is next to no info on the GDID outside of discussing the case.Microsoft helped the FBI track Peter Stokes down using GDID — a Global Device Identifier, which is assigned to every Windows installation and cannot be changed unless the OS is wiped
The aspect I am most curious about is what mechanisms are actually used for websites and services to obtain & track your GDID? There is one article here that hypothesizes about how to limit GDID "leakage" through having a local Win account, not using Chrome or Edge and absolutely not using goycattle features like Onedrive, phonelink or xbox.
Here is something interesting: If you ever edit an image in Nu-MSPaint and export it as a PNG, a UUID is added to the EXIF data in a new field ("About"). I do not know how the UUID is derived, I do not know if there is other Steganography added and I do not know if it phones home to M$ about the photo being edited (restricted network access on my machine). Regardless, you should be checking and clearing the EXIF data of any image before you upload it anywhere. Example below (Randomized the UUID before posting)
Somewhat related security question: What options are out there for containerizing different activities? As in fully isolating KiwiFarms and an image editor from Banking/Personal/Work areas? The idea I am going for is running & managing pseudo-Qubes. The obvious choice is a small VM per activity, but I am just curious as to what other better options or implementations are out there.
I have tried QubesOS on a pair of laptops before, but it was just not usable enough for daily driving and I required dedicated GPU access for some programs. I did however enjoy the system as a concept as it was so divergent to anything I have really used before.