How exactly does Microsoft link their gdid to a hotel booking?

Hotels last I saw don't collect an obscure gdid...

Did this victim use edge and sync their browser history or something perhaps?

Edge has a feature where it will periodically pull the bookmarks and browsing history from any other browsers you have installed, so they'll then get sent to Microsoft and associated with your Microsoft account. This was initially enabled by default without the user's consent, although I believe now you may have to opt into it if you do a fresh Windows install. I only realized this was a thing because one time my work PC rebooted to install an update, then Edge came up instead of Firefox, but with all my Firefox tabs. I guess this was part of some effort to try to trick old people who wouldn't notice the difference into switching to Edge. Here's a news article about someone else running into this when it started happening: https://www.theverge.com/24054329/microsoft-edge-automatic-c...

▲

VerifiedReports 3 hours ago | parent | next [-]

"Old" people? How about the vast majority of the public, which is not represented on HN?

Not to mention that one of the many major UI regressions in Windows is the removal of title bars from application windows, which is fundamental to this "trick." Try opening a PDF in Edge and also in Acrobat. Neither window has a title bar, and they are otherwise almost identical. You have to scrutinize the very few controls around the window to determine which app you're looking at.

Microsoft and its software are trash now.

▲

VCFundedGenYer 2 hours ago | parent | next [-]

Edge has less browser market share than Firefox right now, it's not the "vast majority."

▲

simulator5g 2 hours ago | parent [-]

I don’t believe that, there’s probably some missing data. Outside the techno echo chamber that HNers live in, most people use the defaults. I see people using adware browsers that were installed without their knowledge. Computers are just too complex for most people to notice details like what web browser they use.

	▲	robotnikman 5 minutes ago \| parent [-]
		Until they inevitable use Google, and it shows a big popup saying something like "Hey there you should use Chrome its way better and faster, click this button to get it" and then they end up with Chrome. Its basically how Chrome got such a large share of the market despite default browsers like Safari and IE/Edge.

▲

buccal 3 hours ago | parent | prev [-]

Adobe provides PDF viewer that is embedded in Edge...

▲

smileybarry an hour ago | parent | prev | next [-]

> so they'll then get sent to Microsoft and associated with your Microsoft account.

The import is entirely local, the "sent to Microsoft" bit is if you have Edge sync enabled. This is identical to Chrome importing your Firefox data and then syncing it back to Google. Except the Edge import was, by reports at the time, accidentally auto-enabled. But you'd still have to sign into Edge and enable sync.

▲

3 hours ago | parent | prev | next [-]

[deleted]

▲

onetokeoverthe an hour ago | parent | prev [-]

[dead]

▲

CommieBobDole 4 hours ago | parent | prev | next [-]

There's a blurb in the article:

>"Massgrave, the group behind Microsoft Activation Scripts, has noted that Windows setup sends hardware info to Microsoft and receives identifiers back that are later used for Store access and licensing. Blocking GDID assignment breaks both activation and UWP apps."

I think probably it sends the gdid back to Microsoft as part of telemetry/updates/MS account periodic re-auth, which lets them know the current IP address, and then once the government has Microsoft's logs and the various target websites' logs, they can correlate based on IP address. I don't think it's actually sending the gdid to the web sites. Maybe.

This serves to further illustrate that nobody should be using Windows for anything that involves the need for privacy. And doubly, triply, and morefold so, nobody should ever sign a Windows machine into a MS account for any reason.

▲

crtasm 4 hours ago | parent | prev | next [-]

Edge seems likely. Its settings include:

>Send optional diagnostic data to improve Microsoft products [Includes how you use the browser, websites you visit, and enhanced error reporting. Determined by your Windows diagnostic data setting]

>Allow Microsoft to save your browsing activity including history, usage, favourites, web content, and other browsing data to personalise and improve Microsoft Edge and Microsoft services like ads, search, shopping, news, and Copilot [Includes your history, usage, favourites, web content and other browsing data]

▲

mixdup 4 hours ago | parent | prev [-]

Probably had his laptop with him and they simply traced the gdid to a specific IP address that they determined belonged to the hotel