Privacy

4898 readers

409 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago

MODERATORS

Ategon@programming.dev

danielintempesta@programming.dev

440

Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint (www.windowslatest.com)

submitted 2 weeks ago by unglueclass23@programming.dev to c/privacy@programming.dev

47 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] pulsewidth@lemmy.world 19 points 2 weeks ago (2 children)

When Windows provisions a device against a Microsoft Account, a system service called wlidsvc talks to login.live.com and gets back what Microsoft calls a Device PUID, a Passport Unique ID, inside the server’s SOAP response. Server assigned. Windows never computes it locally from anything on your PC. It receives a string and stores it.

It likely uses the motherboard's burned-in TPM module API to generate the unique hardware ID on, and associate with the account/license.

Bruv... it literally says exactly on the statement you quoted that the ID is generated by Microsoft, and explicitly that its not generated on the device. Why would you then go on to speculate that its generated on device by the TPM...?

AFAIK the TPM doesn't generate anything, its role is for storing cryptographic information - not creating it.

[–] 4am@lemmy.zip 4 points 2 weeks ago

Motherboard TPM sends a cryptographically verifiable serial number ID to Microsoft -> Microsoft generates a Device PUID (this ensures all DPUIDs are in the same format) -> Microsoft send generated DPUID back to the device which is stored within the TPM and is cryptographically verifiable to applications which wish to access and know it, and ensure it is genuine and authentic.

TPMs all have a unique identifier burned into them.

[–] artwork@lemmy.world -2 points 2 weeks ago* (last edited 2 weeks ago)

Please do consider checking out how TPM may be used, and I've provided a reference for more context.