[14u2c]

> The ID is generated when Windows is set up with a Microsoft Account

So not only was this “hacker” using Windows and Edge, they singed in to windows with a Microsoft account. And then used that same computer for their social media. Nice.

[crtasm]

The ID is generated even if you only create a local user account. I don't know to what extent that affects tracking/telemetry though.

[steve1977]

It's fascinating, right?

I'm not a "hacker" by any means, but I would probably use a Qubes based system with a dedicated "hacking" VM, only use anonymous VPNs connected from public WiFi access points (having left my mobile at home) while wearing a fake beard and STILL be paranoid that I somehow somewhere make a mistake.

[ffaccount2]

That's what hackers do in popular stories, right? In reality, most cybercriminsls just don't care that much (they usually use Tor browser, though). I mean they mostly use discord and telegram (both unencrypted).

Serious "hackers" are usually state sponsored now, or members of mature groups.

[Cider9986]

They don't care, I would say they don't know.

I saw an article where they analyzed the leaked IP addresses from a breach forum, and some of the top ten were Surfshark and iCloud Private relay.

[gruez]

>and some of the top ten were Surfshark and iCloud Private relay.

what's wrong with icloud private relay? It uses a 2-hop architecture so it's probably more private than any single-hop VPN.

[Cider9986]

It's good, but it's funny to think about cybercriminals running Safari and an iCloud+ Apple account.

[Cider9986]

Qubes is probably the best option but, the last time I checked, it didn't have certain deniability features that someone with the feds in their threat model might prefer.

Personally I'd say use Qubes because it might be better at preventing you from getting raided in the first place.

Decisions decisions.