fidzu : nerd

A criminal complaint against alleged Scattered Spider member Peter Stokes revealed that Microsoft can associate Windows activity with a persistent "Global Device ID," which investigators used to link his PC to online activity connected to a hack. While unique device IDs are common, the case has raised privacy concerns because the identifier can apparently persist across updates, has no simple opt-out, and may allow Microsoft to connect a Windows installation to activity on third-party services. PCMag reports: Last week, the U.S. announced it had extradited 19-year-old Peter Stokes from Europe for allegedly being a member of the notorious hacking group Scattered Spider. But the case stands out because Microsoft played a key role in linking Stokes to the suspected hacking crimes, according to an unsealed criminal complaint. Stokes allegedly hacked an unnamed luxury jewelry retailer in May 2025 while using a VPN. The 39-page criminal complaint shows the FBI used Microsoft records to discover that his IP address was associated with a Microsoft device identifier known as Global Device ID (GDID). "According to a Microsoft representative, a Global Device Identifier in the Windows ecosystem is a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device, either a physical device (e.g., a mobile phone or laptop) or virtual machine, across certain Microsoft services and scenarios," the complaint explains. The global device ID isn't exactly surprising, given that it's standard practice to assign a unique ID to each account or device so a tech provider can recognize and distinguish between them. But the complaint reveals Microsoft can associate the GDID with third-party services and the timing as well, giving Redmond a way to theoretically track a user's online activity. In other words, Redmond might be able to track the online activity of your Windows PC without third-party browser cookies. Stokes was discovered exploiting a web development tool called ngrok to bypass the jewelry retailer's network defenses. The complaint says Microsoft had records showing that on May 12, 2025, at 19:21 UTC, the GDID associated with Stokes' computer "accessed, among other ngrok pages, 'https://dashboard[.]ngrok.com/signup,' the ngrok page to set up an ngrok account." The document adds that Microsoft records also showed the GDID accessing "multiple sites" from servers at Tzulo, a web hosting provider, to help pull off the hack. Hence, the fact that federal investigators used the Microsoft identifier to nab a suspected hacker is raising concerns that it could be abused for other surveillance purposes. "Microsoft Windows is surveillance software," cybersecurity expert Matthew Hickey alleged in a tweet.

Read more of this story at Slashdot.

07 Jul 2026 5:00pm GMT

The T70S can be eligible for racing events or built to be road-legal.

07 Jul 2026 4:45pm GMT

Comments

07 Jul 2026 4:42pm GMT

Comments

07 Jul 2026 4:38pm GMT

Comments

07 Jul 2026 4:31pm GMT

It's early, but the plan is to reduce dependency on Nvidia and Huawei.

07 Jul 2026 4:14pm GMT

An anonymous reader quotes a report from TechCrunch: These may be the last days of Amazon's Mechanical Turk. An announcement on the Mechanical Turk website says that on July 30, 2026, the crowdsourcing service will close to new customers. Amazon Web Services says the decision was made after "careful consideration," adding, "Existing customers can continue to use the service as normal. AWS continues to invest in security and availability improvements for Mechanical Turk, but we do not plan to introduce new features." In other words, Amazon isn't completely pulling the plug, but the service is very much on life support. Further reading: Horror Stories From Inside Amazon's Mechanical Turk (2020)

Read more of this story at Slashdot.

07 Jul 2026 4:00pm GMT

Male dragonflies' dramatic aerial combat maneuvers emerge from relatively simple vision-based rules.

07 Jul 2026 3:54pm GMT

A new study suggests multilingualism may slow brain aging, with bilingual people showing brains that appear about six years younger than monolingual speakers and people who speak four languages showing brains that appear up to 13 years younger. Researchers say earlier language learning and higher proficiency appear to strengthen the effect. The Guardian reports: Our brains are made up of billions of nerve cells that communicate with one another. But as we get older, the connectivity in our brains often deteriorates, causing memory and speed of thought to decline. While previous research had observed that people from European countries with greater language proficiency tended to age more slowly, this study measured the impact of speaking languages on individual brains. Scientists in Spain, Chile, Argentina and Dublin compared people living in the Basque region -- characterized by high levels of multilingualism -- who spoke Spanish, Basque, French and/or English. To measure neurological age, the scientists used magnetoencephalography to measure the brain activity of 728 people with varying ages and levels of linguistic ability. They then used AI to process the results to calculate a normal level of brain connectivity at any given age. A second unrelated group of 144 people were then scanned and compared, comprising equal numbers of people speaking one, two, three or four languages. Dr Lucia Amoruso, from the Basque Center on Cognition, Brain and Language in San Sebastian, said: "In simple terms, people who spoke more languages tended to have brains that looked younger than expected for their chronological age. The effect was not only related to the number of languages spoken. Higher language proficiency and earlier acquisition of a second language were also associated with more delayed brain ageing. This suggests that multilingual experience matters as a gradient: it is not simply about being bilingual or not, but about the depth and duration of language experience."

Read more of this story at Slashdot.

07 Jul 2026 3:00pm GMT

postmarketOS users get Plasma 6.7, a new Rust-based usb-signaller tool, Duranium enhancements, and several packaging cleanups.

06 Jul 2026 6:50pm GMT

Kdenlive 26.04.3, an open-source video editor, arrives with crash fixes, timeline improvements, effect corrections, and continued security hardening.

06 Jul 2026 2:25pm GMT

FreeRDP 3.28 brings multiple security fixes, a revived iOS client, Android build updates, Windows client improvements, and better testing.

06 Jul 2026 1:34pm GMT