Wouldn't it make more sense to instead use the same GDID on thousands of hosts?

Or a random GDID on each read?

No GDID sounds like it sticks out a lot more.

while it'd be nice for your paranoia to believe this id key is used for surveillance, it's more likely they just use the same type of finger printing that browsers use.

There's zero way to onion.route your internet connection information, unless you plan to go nowhere and do nothing.

Sure, it's worth to highlight privacy-potential-invasions, but the idea that you'll some how escape notice by changing the gdid is short sighted navel gazing.

Windows has a hardcoded list of Microsoft domains that entirely bypass the hosts file. I see nothing about this, so I would assume there is no countermeasure here. Curiously, this approach appears to have been tested as working anyway.

  > Court reporting in 2026 established that Microsoft held a GDID-to-URL/time/IP association in one investigation. 

Afaik, this is illegal under GDPR, as an IP has been classified as a personal identifier.

"The mutation path", "the fully lab-validated line. Other accepted builds warn.", "Status can still inspect", "command, verdict, exit code", "device-identity rehydrate sources", "the network gate", "real-shaped PUID"?

WTF.

That was extremely difficult to read. I'm assuming it's LLMese (I've had less trouble with reading the writing of ESL'ers), but one of the strangest dialects of it I've ever seen. It has the flavour of article-spun SEO spam and those shady fake research papers with "tortured phrases". What causes this obfuscated writing style?

Fun story, when my ex and I split a few years ago, I wiped all connections of my Microsoft account to the machine I built him.

Last week, when I logged into my Microsoft account, I had an extra machine with a funny name. Checking some logs, sure enough that was the hostname he gave that machine. Realized what had happened, refreshed the page, and it was gone.

The URL parameter for these devices in the Microsoft Account page is the GDID. So the Microsoft Account page showed me a GDID of a device I unlinked ~4 years ago. (And I'm slightly obsessive, I check on my Google/Microsoft account every other month.) Gooood job Microsoft.

Sharing in the hope it helps even one person on the fence to convert.

C. 2012 I swore never to use Windows again, and I've managed it! It is possible - macOS is really good (you'll have to unlearn your muscle memory of the Ctrl key) and Linux gaming has come a long way.

If using Windows professionally, consider installing it in a VM on your mac or linux box, then asking your agent to set up scripts that remote to to it (eg. via ssh) and do the required tasks (builds, headless test-runs etc) - remotely.

Offtopic for the GDID thing; but couldn't be more on topic if you think the market shouldn't tolerate GDIDs and such things.

What's the intersection between the GDID schizos and those who believe Microsoft should be forced to collect your child's birth date and provide it to any app or site that asks for it?