A while ago, the story of 19-year-old hacker Peter Stokes from the Scattered Spider group went viral. The guy breached a jewelry store network and demanded $8 million for non-disclosure of data. He wasn’t an idiot: he used a VPN, operated via RDP, and covered his tracks. But the FBI knocked on his door anyway. Do you know what tripped him up? It wasn’t an IP leak or snitching on accomplices. It was his own computer via GDID technology.
GDID (Global Device Identifier) is a unique identifier that Microsoft binds inextricably to every Windows installation. It is not tied to hardware or an account, but is a digital passport of your system. And this system maniacally collects telemetry: which programs you open, which websites you visit, and when you turn off your computer.
How does the VPN trap work? Many people think they become anonymous after turning it on. Metaphorically, a VPN is like fake mustaches and dark sunglasses. You put them on (change your IP), enter Telegram or Tor to read opposition channels, and go about your business. Windows records: “User with GDID №12345 opened Tor.exe at 14:00.” Then you take off your “fake mustaches” (turn off the VPN) to log into your banking app and place an order on Ozon using your real home IP (as you probably already know, it is impossible to access many Russian services with a VPN turned on). Shortly after, Windows makes another entry: “User with GDID №12345 logged in to play Dota from an IP address in the city of Syzran.” Then, all of this is sent in a neat little package to the servers of the “Corporation of Good” in Redmond.
But I’m in Russia, Microsoft has left, the FBI won’t reach us?! Yes, a Major cannot simply send a fax to Bill Gates requesting the logs of an opposition figure. But:
1) Broker data and telemetry leak regularly. Intelligence services are perfectly capable of buying the necessary databases from providers and corporations on the black market.
2) State trojans and spyware (which can reach you disguised as anything) can read your GDID locally. From there, it’s just a matter of technique—matching it with provider logs, which, under the “Yarovaya Law,” already record all your traffic.
3) If they want to get to you, they can fabricate a “cyber fraud” case and send a request through Interpol. Corporations often satisfy such requests without unnecessary questions.
How, then, can you protect yourself?
The radical solution is switching to Linux. If you engage in opposition activities, admin channels, or work with sensitive information—delete Windows. Stop voluntarily letting a corporate overseer into your home. In 2026, Linux is not just a black screen for geeks. Something like Linux Mint or Ubuntu can be installed in a couple of clicks and looks more intuitive than Windows. An open-source system doesn’t snitch out of the box.
The compromise solution is to gag Windows. Because sometimes you can’t do without Windows: specific work requirements, corporate software, favorite games. And if you are forced to live in the same room as a snitch, you should at least tape his mouth shut. To this end, enthusiasts have created excellent free utilities: wpd.app (Windows Privacy Dashboard) and O&O ShutUp10++.
Download them, run them, and in a couple of clicks, cut out all telemetry. They disable data collection, block report transmissions to Microsoft, shut down Cortana, and prevent applications from reading your location. But there is an important nuance: Windows is a stubborn creation. After every major update, the system will try to secretly reset your settings and start spying again. So, check these utilities after updates.
And remember the main rule of digital hygiene: separate your identities! The device you use to write posts about freedom should not know your name, where you live, or what your favorite type of coffee is when ordering delivery.
