spider Archives

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.

AppWizard

July 10, 2026

25 Games Tested On The Steam Machine: A Good, But Pricey Device

Valve's Steam Machine, priced at ,000, was tested with a 2TB unit using default settings at 1080p resolution, upscaled to 4K. Various games were evaluated for performance, including: - Cyberpunk 2077: Smooth 60 FPS with light ray tracing; stability issues at resolutions above 1080p. - Mouse: P.I. for Hire: Ran flawlessly at 60 FPS with default settings. - Left 4 Dead 2: Performed admirably. - Borderlands 4: Had visual issues initially; became playable after adjustments. - Hades 2: Ran seamlessly at default settings. - Silent Hill 2: Struggled with performance. - Doom: The Dark Ages: Played smoothly; could use visual adjustments. - Megabonk: Performed impressively. - Spider-Man 2: Decent at default settings; improved with resolution increase. - Windrose: Struggled at default settings; medium settings improved performance. - Overwatch: Exceptional experience at default settings. - Grand Theft Auto V: Ran well after initial setup issues. - Gears of War Reloaded: Visuals improved after tweaks. - Fallout 4: Maintained solid performance without adjustments. - Control Ultimate Edition: Needed settings lowered for stable performance. - Arc Raiders: Playable but with fuzzy image quality. - Elden Ring: Performed admirably with some tweaks. - Vampire Crawlers: Provided a sharp experience. - Resident Evil 4 remake: Satisfactory but needed adjustments for better visuals. - Ratchet & Clank: Rift Apart: Became playable after adjustments. - Helldivers 2: Ran well but lacked sharpness compared to PS5 Pro. - Resident Evil Requiem: Solid experience but fell short against PS5 Pro. - The Last of Us Part II Remastered: Ran exceptionally well. - Peak: Required no adjustments and performed comparably to high-end PCs. - Warhammer 40K: Darktide: Achieved stable 60 FPS after tweaks. - Halo: Master Chief Collection: Unplayable due to login issues. - Tiny Terry’s Turbo Trip: Ran smoothly at maximum settings. - Rage: Ran smoothly after adjustments. The Steam Machine is seen as intriguing but its high price limits appeal to dedicated enthusiasts. It offers access to a vast library of Steam games, particularly older or 2D titles, but may not be justifiable for non-PC gamers, especially with upcoming titles on rival consoles.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

Winsage

July 9, 2026

Windows hides a secret identifier that Microsoft hands over to the FBI

19-year-old Peter Stokes, a member of the Scattered Spider group, was arrested by the FBI due to a unique number embedded in his Windows operating system known as the Global Device Identifier (GDID). This identifier, assigned during Windows installation, remains unchanged and can leak user information despite the use of VPNs. The FBI identified Stokes by obtaining a history of IP addresses linked to his GDID from Microsoft, which allowed them to trace his online activities across various platforms. Microsoft tracks over a billion devices with this permanent identifier, which cannot be disabled.

Winsage

July 9, 2026

GDID Windows – Cut the tracker that follows you even through a VPN

In April 2026, the FBI apprehended an individual associated with the Scattered Spider group, who had concealed his online activities using a VPN. His efforts were thwarted by the GDID, a 64-bit Persistent Unique Identifier assigned by Microsoft upon logging into Windows. The GDID is stored in plain text in the registry and is linked to Microsoft’s servers, remaining unaffected by changes to IP addresses or attempts to delete it. Disabling Windows telemetry does not prevent the GDID from being accessed, as it operates through other services. To mitigate its transmission, users can disable certain services and modify the hosts file, although the GDID itself remains stored on Microsoft’s servers. Scripts are available on GitHub to audit and implement changes regarding the GDID. Transitioning to a local account does not guarantee anonymity, and for sensitive activities, using a live Linux system is recommended for better data control.

Winsage

July 8, 2026

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

Peter Stokes, a 19-year-old from Estonia, was arrested and extradited to the United States on charges related to digital crimes, with the FBI using telemetry logs from Microsoft Windows to trace his online activities. These logs included his Global Device Identifier (GDID) and records of websites he visited. Stokes likely had his telemetry settings configured to Optional/Full, which allowed the transmission of URL data. The FBI connected Stokes to his ngrok account and linked his travel records to a New York IP address and a rental at the Empire Hotel, aided by photos he shared. Google and Apple assisted in the investigation by tracing Stokes' phishing phone number back to the same IP address used for his ngrok account. Stokes attempted to obscure his digital footprint using a VPN and other services, but modern digital identification methods made it difficult to remain anonymous.

Winsage

July 7, 2026

Microsoft Windows telemetry identified hacker despite VPN use

Microsoft's telemetry capabilities helped identify Peter Stokes, a 19-year-old suspected member of the Scattered Spider hacking group, despite his use of a VPN. The investigation revealed a significant cybersecurity breach in May 2025 at a luxury jewelry retailer, leading to the theft of approximately 77 GB of sensitive data and a ransom demand. Investigators linked Stokes to the breach through a Global Device Identifier (GDID) associated with a Windows device that created an ngrok account used in the attack. This device accessed various online platforms and shared IP addresses with Stokes' accounts on Apple, Snapchat, and Facebook, corroborated by travel records and social media posts. The evidence included server logs from Scattered Spider's infrastructure and records from ngrok and other providers.

AppWizard

July 6, 2026

What is Paralives? The creative life simulator game that could rival The Sims

Paralives, created by indie designer Alex Massé, launched on Steam in May 2026 as an early access title and sold 250,000 copies within eight hours, achieving a peak concurrent player count of 78,603. The game allows players to create and customize characters called Parafolk, featuring extensive representation and body inclusivity. It offers user-friendly building and decorating tools, enabling flexible item placement and personalization. The art style is a comic-book aesthetic reminiscent of "Spider-Man: Into the Spider-Verse." Paralives was developed independently with community feedback, contrasting with EA's acquisition of The Sims, which raised concerns among players regarding corporate influence and representation. The game is priced at £33.50, with plans for free downloadable content updates.

AppWizard

July 1, 2026

PlayStation PC Retreat Is A Mistake, As 18+ Months Late Ports Made Money Without Costing a Single Console Sale

In recent years, PlayStation has shifted its strategy by porting titles previously exclusive to PlayStation 4 and 5, such as God of War and The Last of Us, to PC. This transition was confirmed by SIE's president, Hideaki Nishino, who stated that future ports will focus on multiplayer and live-service games. Former PlayStation head Shawn Layden discussed the rationale behind this strategy, emphasizing the importance of reaching a broader audience beyond console owners. He noted that the late PC ports have successfully introduced PlayStation's characters to new players and have not negatively impacted core sales, as those waiting for PC releases were unlikely to buy the hardware. Layden supports staggered PC releases to maintain platform exclusivity, which he believes is essential for differentiating the PlayStation brand and driving hardware sales. He cautioned against a day-and-date release strategy, which could dilute the brand's identity. PlayStation is also mindful of competition from Xbox, which releases exclusives on PC simultaneously, and is committed to keeping certain titles exclusive to its consoles.