..It is to Madame Justice that I dedicate this concerto, in honor of the holiday that she seems to have taken from these parts, and in recognition of the impostor that stands in her stead..
A 19-year-old hacker used VPNs, tunneling tools, and rotated IPs across 3 countries. The FBI still caught him. Here's the Windows feature that made it possible and why it should concern everyone.
Peter Stokes, an alleged member of Scattered Spider (the group behind $100M+ in ransomware extortion), was arrested at Helsinki Airport this April. Court documents revealed a key piece of evidence: Microsoft's GDID.
What is a GDID?
GDID = Global Device Identifier. It's a unique code baked into every Windows installation. Microsoft uses it for telemetry, crash reports, feature usage, and license verification (it's why swapping your CPU can break your Windows activation).
What Microsoft gave the FBI:
โ Web activity with timestamps
โ Gaming history
โ IP addresses used over time
โ Tool usage (including Ngrok, a tunneling app)
โ Azure account activity
All tied to one persistent device fingerprint. Even though the VPN masked his IP, it didn't affect the GDID.
How they connected the dots:
Every time Stokes logged in to Snapchat, Apple, or Facebook from a new IP address, the GDID was there too. Investigators matched timestamps across platforms and countries: Tallinn, New York, Thailand, Germany. Different IPs. Same machine. Same person.
Microsoft had already identified him in October 2024 and filed a criminal referral. He was still 17. So they waited till He turned 18. Then they moved.
Yes, Stokes is accused of serious crimes. But the GDID data exists on every Windows machine, including yours. The infrastructure that handed his entire digital life to the FBI is the same infrastructure running on your laptop right now.
The unanswered questions:
- There's no public policy on when Microsoft shares GDID data
- No known opt-out mechanism
- No transparency report specifically covering GDID disclosures
- What other criminal referrals has Microsoft quietly filed?
@georgenjoroge_ ๐ค I could be wrong and maybe he has been there to ascertain his claims, but, is broski assuming that men who have made it have nobody to call at 2am?..or just because someone is eating alone that they are alone?..
@Masika_039 Excuse me miss, jina langu ni Jackson,
Together me and you tutaleta action,
Jo sogea karibu nikupe, mitikasi,
Sio utani ninachoomba ni nafasi,
Kama dakika Tano tu of your time, nikueleze ni-livyokumind,
Toka first time nilipo lay my eyes, on you nilibelieve it's true..
๐ค why don't people ever get it?..most of the time when it comes to IPOs, you're facilitating someone else's exit..so..plus..this is elon musk, didn't he pull the same thing the doge coin?, where "investors" were left with their peckers in their hands?..people never learn..
I HATE YOU ELON MUSK I HATE YOU SPACEX I HATE YOU I HATE YOU I HATE YOO I HATE
EVERYONE SAID IT WAS GOING TO THE MOON SO I PUT 18K INTO CALLS
THAT WAS MY LIFE SAVINGS AND THE MONEY I WAS GOING TO USE FOR COLLEGE I DONT KNOW WHATCTO DO ANYMORE