court Archives

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.

Winsage

July 11, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes allegedly used sophisticated methods to obscure his identity during a breach at a luxury retailer, but the FBI uncovered his identity through a Global Device Identifier (GDID) linked to his Windows installation. GDID is a persistent device-level identifier that uniquely identifies a Windows installation and remains unchanged through operating system updates, only resetting upon complete reinstallation. Users cannot disable GDID, and attempts to remove it may disrupt Windows activation. To minimize data associated with GDID, users can opt for a local account, limit diagnostic telemetry, disable Activity history, and be cautious during reinstallation. VPNs do not prevent Microsoft from logging GDID, IP addresses, and URLs, making them ineffective for privacy on Windows. GDID has been described as a covert tracking beacon, and security experts advise against using Windows for sensitive tasks, suggesting alternatives like Linux.

Winsage

July 10, 2026

A hacker’s arrest just revealed how Microsoft can track your Windows device

A teenager named Peter Stokes is facing federal charges in Chicago for allegedly hacking a U.S. jewelry retailer while using a VPN to conceal his online activities. Microsoft provided the FBI with data linked to a tracking mechanism called the Global Device Identifier (GDID), which is a unique number assigned to every Windows installation that persists through updates. This identifier allowed authorities to connect Stokes' computer to specific websites, despite his VPN usage. Stokes was arrested in Helsinki in April 2026 while trying to board a flight to Japan, carrying two two-terabyte hard drives. The GDID enabled Microsoft to track Stokes' activities on third-party services, raising concerns about privacy and data tracking.

Winsage

July 10, 2026

Windows 11 Has a Hidden Tracker – Here’s How to Limit It

Peter Stokes is involved in a breach with a luxury retailer, using tactics like VPNs and rotating IP addresses to hide his digital activity. The FBI discovered a Global Device Identifier (GDID) linked to his Windows installation, which is a persistent device-level identifier that uniquely identifies Windows installations. GDID remains unchanged through operating system updates but resets with a full reinstallation. Disabling GDID is not possible, as attempts to do so would disrupt Windows activation. Users can minimize data linked to GDID by using a local account, reducing diagnostic telemetry, disabling Activity history, and carefully managing reinstalls. VPNs do not prevent Microsoft from logging GDID, IP address, and URL data. Privacy researchers view GDID as a covert tracking mechanism, and Windows lacks user-facing options to reset this identifier, unlike Apple and Google.

AppWizard

July 10, 2026

One of my favorite Warhammer 40,000 books is getting an unexpected sequel

Games Workshop has shifted its focus to explore the perspectives of various alien species in the Warhammer 40,000 universe. Notable works include "Ghazghkull Thraka: Prophet of the Waaagh" for ork fans and "Voidscarred" for those interested in aeldari pirates. The novel "The Infinite and the Divine" by Robert Rath centers on the rivalry between two necrons, Orikan the Diviner and Trazyn the Infinite, who clash over an artifact and face various challenges, including confrontations with Exodite armies and xenos uprisings. Orikan and Trazyn will return in the upcoming title "The Wicked and the Warped," where they must collaborate to uncover the fate of a lost expedition on a Chaos-tainted planet. A reprint of "The Infinite and the Divine" in hardback format is forthcoming, and its audiobook version has received positive reviews.

AppWizard

July 9, 2026

Play Store Catalog Interoperability Goes Live July 22: Android Developers Must Decide

On July 22, 2026, Google Play will launch its Play Catalog Access program, allowing third-party Android stores in the U.S. to access app listings from the Google Play Store, including names, icons, descriptions, screenshots, and metadata. Developers will be automatically enrolled unless they opt out by the deadline. The program enables these stores to showcase app listings while downloads will still occur through Google Play Console, ensuring Google’s service fee applies. All downloaded apps will undergo Play Protect scanning, and enrolled stores must prevent malware distribution, maintaining a malware installation-attempt rate below one percent. A December 2023 jury verdict found that Google violated federal and California antitrust laws, leading to a Ninth Circuit decision that requires Google to grant third-party app stores access to its catalog, dismantling barriers to competition. The legal battle began in August 2020 when Epic Games sought changes to counter Google's monopolistic practices. A March 2026 settlement introduced a tiered service fee structure, reducing costs for developers from a flat 30 percent commission to 20 percent for new installs and 10 percent for subscriptions. Developers can choose to publish all listings to all enrolled stores, manage stores individually, or opt out entirely. If no action is taken before July 22, Google will automatically share the app's listing with all enrolled third-party stores. The Play Catalog Access program aims to address the cold-start problem faced by alternative stores but does not guarantee a competitive ecosystem, as third-party stores must still create compelling user experiences to attract customers.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.

AppWizard

July 3, 2026

A Potential Lawsuit Against Valve Might Have You Rethinking The Value Of Steam Sales

The Consumer Competition Claims Foundation (CCC), a Dutch nonprofit organization, has filed a class action claim against Valve, alleging that the company's practices are stifling competition in the PC gaming market and inflating game prices. The CCC claims that Valve enforces price-parity agreements through contracts and peer pressure, preventing game developers from offering lower prices on competing platforms. They argue that Valve's 30% commission on sales restricts studios from setting their own prices, leading to higher costs for consumers. The CCC is also concerned about Valve's requirement for microtransactions to go through the Steam Wallet, which incurs an additional 30% commission, and the practice of region-locking keys. They are seeking €220 million in damages for affected Dutch players. The CCC is currently exploring an amicable resolution with Valve and is encouraging individuals to support their cause by signing up on the GameClaim website. The CCC's claims extend beyond direct Steam purchases, affecting the entire market. The likelihood of a successful lawsuit is uncertain, as the CCC has a mixed track record in previous cases. Valve has faced legal challenges in the past, including a penalty in 2016 for misleading consumer representations, and ongoing lawsuits regarding its market dominance.

AppWizard

July 2, 2026

Google must pay €4.1bn fine for using Android to ‘block’ rivals

Europe's highest court has ordered Google to pay a fine of €4.1 billion (£3.5 billion) for practices related to the Android operating system that stifled competition. The European Commission initially imposed a €4.3 billion fine in 2018, later adjusted to €4.1 billion in 2022, which the court upheld after Google's appeal. This is the largest fine ever levied against Google by the Commission. Google expressed disappointment with the ruling, stating it does not recognize their investments in Android. The original fine was based on allegations of three illegal practices, although it was noted that Android allows users to download alternative web browsers and use other search engines. Additionally, the European Commission previously fined Google €2.4 billion in September 2024 for abusing market dominance and €2.95 billion in September 2025 for breaching competition laws in online advertising. A Russian court also fined Google two undecillion roubles in October 2024 for restricting Russian state media channels on YouTube.

AppWizard

July 1, 2026

Kalshi Challenges Illinois Sports Betting Tax as Prediction Market Jurisdiction Fight Escalates

Kalshi has filed a federal lawsuit against the state of Illinois, challenging a law that imposes taxes and licensing requirements on sports-related trades in prediction markets. The lawsuit questions whether contracts traded on Kalshi's federally regulated exchange are classified as sports bets under state laws or as financial derivatives overseen by the Commodity Futures Trading Commission (CFTC). Illinois law categorizes prediction market operators as sports wagering businesses, imposing a 1.75% tax on the first five million sports wagers annually, increasing to 3.5% for wagers above that threshold, along with a costly licensing requirement. Kalshi argues that these state requirements are preempted by federal law and contends that its offerings are financial instruments, not traditional wagers. The dispute reflects a broader conflict between federal and state regulators regarding jurisdiction over prediction markets, with the CFTC previously filing a lawsuit against Illinois over similar regulatory issues. The outcome of this legal battle could have implications for the regulation of prediction contracts related to various events beyond sports.