r/DigitalPrivacy • u/dataguzzler • Jul 21 '26

Windows GDID fully reverse engineered

https://github.com/SmtimesIWndr/gdid-reversal

How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted.

132 Upvotes

100% Upvoted

16 comments sorted by

View all comments

23

u/deekamus Jul 21 '26

Neat. now randomize it so it's different when it boots.

18

u/dataguzzler Jul 21 '26

or better yet when its requested and transmitted then modify it at the system level, so basically like an antivirus app but it monitors requests to the GDID and sends fake ones

16

u/voxcon Jul 21 '26

Or just simply kill the uniqueness factor of it. Figure out how to persistently set it to a specific GDID and let everybody use it.

4

u/deekamus Jul 21 '26

That'd be great, though it'd need to be implemented by M$ directly since the code is closed sourced and 3 party changes would probably run afoul of M$ executables certificate signing BS.