Deletes all instances of Microsoft's GDID and prevents minting of new ones

campuscodi 64 points 56 comments August 09, 2026
github.com · View on Hacker News

Discussion Highlights (10 comments)

hypfer

Wouldn't it make more sense to instead use the same GDID on thousands of hosts? Or a random GDID on each read? No GDID sounds like it sticks out a lot more.

cyanydeez

while it'd be nice for your paranoia to believe this id key is used for surveillance, it's more likely they just use the same type of finger printing that browsers use. There's zero way to onion.route your internet connection information, unless you plan to go nowhere and do nothing. Sure, it's worth to highlight privacy-potential-invasions, but the idea that you'll some how escape notice by changing the gdid is short sighted navel gazing.

LoganDark

Windows has a hardcoded list of Microsoft domain names that entirely bypass the hosts file. I see nothing about this, so I would assume there is no countermeasure here. Curiously, this approach appears to have been tested as working anyway.

exceptione

> Court reporting in 2026 established that Microsoft held a GDID-to-URL/time/IP association in one investigation. Afaik, this is illegal under GDPR, as an IP has been classified as a personal identifier.

userbinator

"The mutation path", "the fully lab-validated line. Other accepted builds warn.", "Status can still inspect", "command, verdict, exit code", "device-identity rehydrate sources", "the network gate", "real-shaped PUID"? WTF. That was extremely difficult to read. I'm assuming it's LLMese (I've had less trouble with reading the writing of ESL'ers), but one of the strangest dialects of it I've ever seen. It has the flavour of article-spun SEO spam and those shady fake research papers with "tortured phrases". What causes this obfuscated writing style?

nixosbestos

Fun story, when my ex and I split a few years ago, I wiped all connections of my Microsoft account to the machine I built him. Last week, when I logged into my Microsoft account, I had an extra machine with a funny name. Checking some logs, sure enough that was the hostname he gave that machine. Realized what had happened, refreshed the page, and it was gone. The URL parameter for these devices in the Microsoft Account page is the GDID. So the Microsoft Account page showed me a GDID of a device I unlinked ~4 years ago. (And I'm slightly obsessive, I check on my Google/Microsoft account every other month.) Gooood job Microsoft.

cadamsdotcom

Sharing in the hope it helps even one person on the fence to convert. C. 2012 I swore never to use Windows again, and I've managed it! It is possible - macOS is really good (you'll have to unlearn your muscle memory of the Ctrl key) and Linux gaming has come a long way. If using Windows professionally, consider installing it in a VM on your mac or linux box, then asking your agent to set up scripts that remote to to it (eg. via ssh) and do the required tasks (builds, headless test-runs etc) - remotely. Offtopic for the GDID thing; but couldn't be more on topic if you think the market shouldn't tolerate GDIDs and such things.

IronWolve

<Gov AI> this user keeps hitting our instances with no GDID, better look into it.

monster_truck

This is slop (derogatory) It's missing quite a few things. Not exactly a ringing endorsement for claude

VCFundedGenYer

FYI this contains major red flags. Degrading the MS sign in and other features is not sustainable. If you truly want to get away from GDID and all the other Windows nonsense, start using Linux Mint.

Semantic search powered by Rivestack pgvector
4,128 stories · 37,281 chunks indexed