Poor kid. Seems he was just starting out and didn't get into the weeds of OpSec.
He used a personal laptop with his personal information stored on it tied to an identifier. Not great OpSec. A hardware ID spoofer or a partitioned disk with different OS would've made wonders.
Maybe I’m missing something here but how is that not a logical conclusion for any service where you have a unique identifier? If it can get your IP it can get a general idea (CGNAT/VPN can screw with it a bit), if it’s allowed network access it can get nearby APs, which are pretty well mapped at this point, and if you allow it GPS, well that’s a no brainer.
How does Microsoft know which GDID is accessing which websites?
The document adds that Microsoft records also showed the GDID accessing “multiple sites” from servers at Tzulo, a web hosting provider, to help pull off the hack.
The GDID is one thing, but how is the connection to activities made? Is the GDID sent while making requests to a server (in this case Tzulo), which records it? But then it wouldn’t be microsoft records showing that. But if it isn‘t, how do you know which GDID visits a website? If Microsoft is collecting which website is visited on device and sending it off to their servers then the GDID is the smallest thing to worry about.
Yeah... I'm currently really shocked and afraid of the ongoing push of chat control on Europe as well That will be a major impact on privacy and without reason And they just try again and again - they don't even have a pause, they just start again and hope, that it will go through one time
Not sure how to escape it, and if, you are already labelled a terrorist Like Spanish police looks if you have a pixel with GrapheneOS, because then they think you're a drug dealer
Or years ago the apartment of a guy in Vienna got raided and all his work IT devices confiscated, just because he ran a remote VPS as Tor exit node
Not sure what we can do
I grew up in the internet and it was a great place. Now people without any knowledge want to take this all away...
Rat_in_a_hat
in reply to Moovau • • •Poor kid. Seems he was just starting out and didn't get into the weeds of OpSec.
He used a personal laptop with his personal information stored on it tied to an identifier. Not great OpSec. A hardware ID spoofer or a partitioned disk with different OS would've made wonders.
Eternal192
in reply to Moovau • • •ramble81
in reply to Moovau • • •ieris19
in reply to ramble81 • • •The whole point of a lot of these unique identifiers is that they’re anonymous so they can legally collect more data on you.
The goal is that you can’t reverse the ID to find the person, because then it ceases to be personally identifiable information.
unskilled5117
in reply to Moovau • • •How does Microsoft know which GDID is accessing which websites?
The GDID is one thing, but how is the connection to activities made? Is the GDID sent while making requests to a server (in this case Tzulo), which records it? But then it wouldn’t be microsoft records showing that. But if it isn‘t, how do you know which GDID visits a website? If Microsoft is collecting which website is visited on device and sending it off to their servers then the GDID is the smallest thing to worry about.
belated_frog_pants
in reply to Moovau • • •Musikfreak
in reply to Moovau • • •medem
in reply to Moovau • • •naeap
Unknown parent • • •...or a Google, Facebook, or... account
But yes
naeap
Unknown parent • • •I was more thinking about 3rd parties using Microsoft, Google, Facebook logins for their shit, so can get tracked even better
But, yes, you're right
naeap
Unknown parent • • •Yeah... I'm currently really shocked and afraid of the ongoing push of chat control on Europe as well
That will be a major impact on privacy and without reason
And they just try again and again - they don't even have a pause, they just start again and hope, that it will go through one time
Not sure how to escape it, and if, you are already labelled a terrorist
Like Spanish police looks if you have a pixel with GrapheneOS, because then they think you're a drug dealer
Or years ago the apartment of a guy in Vienna got raided and all his work IT devices confiscated, just because he ran a remote VPS as Tor exit node
Not sure what we can do
I grew up in the internet and it was a great place.
Now people without any knowledge want to take this all away...