maxo133

Google is probably the most aggressive anti-privacy big tech company currently operating.

No other big-tech company goes to such great lengths to deanonymize users and make its services difficult to use, especially during account creation.

The requirement to have a mobile device to scan a QR code to verify that you're human. Reverse SMS verification, where you have to send an SMS rather than receive a verification code. You think of signing up using a VPN server in another country? The phone number you use to send the SMS from must also be from that country.

Not being able to watch YouTube videos when using VPN - without signing in to a Google account, all under the guise of "bot protection."

Gemini not working in 3/4 of cases when using VPN.

It's essentially almost impossible to create a Google account without giving up your identity, and your phone number often leads directly to your real-life identity.

I'm not sure what happened in recent years, but they definitely switched their strategy to maximize data collection and make sure privacy-savy users are pressured via technical solutions to reveal their identities.

PS. The first company federal investigators often go for data is often Google

exactly this. and their autofill sucks so much on chrome desktop. It's bloated and slow. Even lastpass has a better and faster extension

Try to bring it up on bitwarden reddit sub, they will eat you alive

They are not.

Developing modern 0-day zero click RCE exploits chains like those developed for iOS is far more complex than hacking to generic company servers

It's completely different scale of difficulty factor. Not a single documentated case of of any AI tool developing such exploit exists

There is a reason why those mobile 0-day exploits are sold and bought on exploit gray market for as much as 10-20 million dollars each

Funny to read this, but google is currently number one anti-privacy big tech company. No other company makes it as difficult for its users using anonymization/privacy software to access their services

I completely disaggree with this take. Modern AI is not yet capable of finding multi-component bugs as advanced as those produced by firms like NSO.

100% agree with your statement that gemini models have most knowledge in domains. They shine in so many generic topics

A script that requests the generation of a new GDID from Microsoft servers and assigns it to the Windows installation. GDID tracking variable became publicly discussed after it was mentioned in the Peter Stokes indictment

AI-generated "research" once more. How can anyone call it full writeup?

As someone pointed out in the X argument comments, this is unconfirmed and most likely NOT how the actual GDID being sent to microsofts servers looks like.

1. The GDID that most closely resembles the one mentioned in the DOJ indictment of Stokes is found inside the registry key Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\IrisService\IrisActionCreatives, which starts with the "g:" prefix and is explicitly called GLOBALDEVICEID. This keys holds cached json response from microsoft servers and this is clear as night and day what value microsoft servers consider a "GDID"

2. According to the research, a Microsoft account is required. No, it's not necessary. Whether or whether you are not logged into your Microsoft device, GDID is being filled in. Did AI forget to check that?

3. How can author claim this is full writeup of GDID, when you did not verify whether the value your AI found, is the one being sent along with telemetry network requests? Author did not even verify whether he found the right thing

I also verified the value computed as suggested by the repository's creator and it is different from the value discovered inside the Iris registry key that begins with "g:".

Summary: The value author of repo claims is a GDID, is not the same value as saved on microsoft servers.