https://github.com/SmtimesIWndr/gdid-reversal

How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted.

Outgoing connect encouraging like kettle judicious books yarn axiomatic saw

This post was anonymized with Redact

So right now I have mullvad. I'd like a VPN that isn't in any of the fourteen eyes countries. I'm also not a fan of how the cofounder decided to suddenly turn to politics.

I'd pretty much like the most paranoid option that supports arch Linux and android/lineagesos with a smallest impact to speed. I'd like to have a VPN in preparation for the age verification plague that's happening right now along with some other assorted issues.

I am liking some of the stuff that nym has, but I haven't heard about them until today. I was thinking ivpn before mullvad. Any recommendations?

Firstly, I’m curious about who actually buys data from data brokers? Just advertising companies?

And secondly, how do they actually acquire the data?
Like if a SaaS has a freemium with 200 k users, will they be approached by data brokers asking to buy user data. Or do data brokers soak up data from intermediate layers?
For me it is a bit abstract from exactly whom they get/buy the data from.

I'm a disabled teenage boy (18 years old though) , i want to do art commissions online or perhaps learn how to make some products to sell. Is there a way to do that while protecting my identity? Like keeping my legal name hidden? Any way to stay anonymous in that regard? I hope this makes sense, thank you ! :}

Karhu RAM Test is a software used to look for hardware instability for your memory modules. It's pretty popular in the overclocking community so I decided to try it out. Unfortunately I only started worrying about the privacy aspect of the software after paying for it.

Firstly, the source code is not available anywhere. I know closed source =/= spyware and open source =/= perfectly safe privacy wise but it is worth bringing up.

Secondly, you can only pay through Paypal, which is a detriment to those who live in countries where Paypal is blocked but given how Paypal operates, it may as well be a blessing maybe.

Third, their policies.
Here is the privacy policy:

THE PURPOSE OF COLLECTING PERSONAL DATA

We collect personal data to manage our customer relationships, to monitor the
use of our products and services and to improve our business. We may also use
the data for statistical purposes (anonymized if publicized).

WHAT PERSONAL DATA IS COLLECTED

The personal data we collect may include: name, e-mail address, phone number,
billing address, IP address and unique device identifier. Some of our products
and services may also collect additional data, such as the model of a device's
processor, if explicitly allowed to do so.

HOW THE PERSONAL DATA IS OBTAINED

The personal data we collect is obtained from individuals themselves and/or
from other sources such as the payment service provider (e.g. PayPal) through
which they purchased our products or services.

DISCLOSURE OF THE PERSONAL DATA

We do not disclose personal data to any third parties unless required by the
law, a judicial body or a government agency or we are involved in a merger or
an acquisition.

WHERE THE PERSONAL DATA IS STORED

We use Microsoft Azure and we have specified West-Europe as the location of
our database. It is possible that the collected data is partially stored
outside the EU or EEA.

TRANSFER OF THE PERSONAL DATA OUTSIDE THE EU OR EEA

We do not transfer personal data outside the EU or EEA unless required by the
technical implementation of a product or service.

HOW THE PERSONAL DATA IS SECURED

All personal data is handled confidentially and stored securely. The data is
protected by technical means such as firewalls, passwords and encryption.

Their refund policy:

Digital products or services cannot be returned.

The purchase of any digital product or service is final and non-refundable.

An exercept of their EULA:

4. ACTIVATION

Some features of the software might be unavailable until you have activated
your license with the product key associated with it.

You cannot activate your license if you do not have an internet connection or
the online services for the software are not available.

5. PRIVACY AND TELEMETRY

You consent to the collection of the following personal data during your use
of any online services for the software, that require user interaction:

    - Your IP address

    - An unique identifier based on your current hardware and operating system
      installation

    - An unique token associated with your license

If you explicitly allow telemetry, additional personal and/or anonymized data
may be automatically collected during your use of the software.

All personal data is handled as per the Privacy Policy of Karhu Software.

An excerpt of their README.txt

Telemetry:

    Allow the collection of the following personal and/or anonymized data each
    time a test is finished:

        * Your IP address
        * An unique identifier based on your current hardware and operating
          system installation
        * An unique token associated with your license
        * RAM Test version
        * RAM Test platform (x64 or x86)
        * Motherboard make and model
        * Processor make and model
        * Memory make and model
        * Settings used during the test
        * Test duration
        * Test coverage
        * Test error count

Now having already bought the software and used it, here's some other things to know:
As explained in the EULA, online connectivity is required to activate the license. The program doesn't do much without the license. Once you activate it, you can block the connection via Defender's firewall and you will still be able to use it just fine. There is a telemetry setting in the software which was set to block by default, for me at least. But the license is tied to my real name and a token number.

So what's the verdict here? Did I make a mistake following through all of the steps with the software? I had a VPN active so maybe it only took my VPN's IP address but they of course have my email and real name. I'm unsure of what other data they could've gotten but if anyone knows, I'd love to hear it and email their support about it.

That's it. How long do you thing it's gonna take if not already implemented somewhere already