> Microsoft’s records showed that at that exact same minute, a Windows device carrying GDID g:6755467234350028 had visited the ngrok signup page. Three hours later, the same GDID visited the retailer’s own website, through the same Tzulo proxy address used to set up the ngrok account. It gave the FBI a device, that don’t rotate the way VPN exit nodes do.
> 
> From there the investigation turned into connecting dots. Once agents had a timeline of every IP address that device had used, they cross referenced it against known logins to accounts prosecutors already suspected belonged to Stokes.

Sometimes we ought to wonder what that transport layer security is good for if MS can just log what sites, including the encrypted part, you visited. Am quite sure that Apple and Google know this too.

optimism

like the covid jab you have in your blood

DarthCoin

A 19-year-old walked through Helsinki airport in April 2026 carrying two 2TB hard drives and a ticket to Japan. He couldn’t make that flight. Finnish police stopped him on an Interpol Red Notice

Microsoft that handed the FBI a way to trace Stokes’ Windows PC across VPNs, proxy servers, and three countries. The tool is called a 

, and outside a handful of enterprise documentation pages, most Windows users had never heard the term before this case made it public.

insane story. What the actual fuck is Microsoft doing.

security

tech

privacy

> A 19-year-old walked through Helsinki airport in April 2026 carrying two 2TB hard drives and a ticket to Japan. He couldn’t make that flight. Finnish police stopped him on an Interpol Red Notice

> Microsoft that handed the FBI a way to trace Stokes’ Windows PC across VPNs, proxy servers, and three countries. The tool is called a **Global Device Identifier, or GDID**, and outside a handful of enterprise documentation pages, most Windows users had never heard the term before this case made it public.

insane story. What the actual fuck is Microsoft doing.