Big Brother in Your PC: How Windows 11 Destroyed the Illusion of Online Privacy
We’ve often warned our readers that nothing you do on the internet is private… but a scary new legal case proves that Microsoft is watching you far more closely than you think.
If you believe turning on a VPN or clicking “Incognito” mode keeps your web habits a secret, think again. Windows 11 has a built-in tracking device that completely strips away your anonymity—and Microsoft just proved they will hand it over to the government on a silver platter.
Caught by a Secret Digital Serial Number
The illusion of privacy shattered when the FBI unsealed a criminal complaint against a 19-year-old hacker named Peter Stokes. Stokes was smart; he used high-tech cloaking tools and Virtual Private Networks (VPNs) to hide his internet address while breaking into a luxury retail company. He thought he was a ghost.
But the FBI didn’t need to crack his security tools. They just went to Microsoft with a subpoena.
Microsoft handed over internal corporate logs tracking a permanent, hidden code inside Stokes’s computer called a Global Device Identifier (GDID). Think of a GDID as an un-deletable digital fingerprint tied to your actual computer hardware. Even though his location was hidden by a VPN, his computer was constantly whispering its true identity back to Microsoft’s mothership—along with a precise timeline of exactly what websites the machine was visiting.
The Spy in Your Software
This case sent shockwaves through the tech world because it exposed a dark truth: Windows is constantly logging your computer’s background behavior.
How much does Microsoft know about your personal browsing? It depends on your settings, but the built-in features most people use every day are the biggest culprits:
• The “Security” Trap: Features like Windows Defender and Microsoft Edge track the web addresses you click on to scan them for safety. But to do that, it bundles those web addresses with your computer’s permanent ID and saves them on Microsoft’s servers.
• The Ghost Tracker: Even if you switch to a private browser like Brave, Windows still records exactly when your computer connects to the internet and what apps you open.
Microsoft isn’t giving the FBI an open door to spy on you; they only hand this data over when forced by a federal warrant.
But the disturbing revelation is that Microsoft has this data in the first place. They have built a tracking system so deep that standard privacy tools are completely useless against it.
How to Lock Down Your PC and Silence Telemetry
This is a huge wake-up call for everyday users. Your operating system is acting like a digital snitch in your own home. While you cannot entirely erase your hardware’s GDID from existence, you can aggressively pull the plug on the telemetry data Windows uses to broadcast your habits.
Take control of your machine right now by following these steps:
1. Kill Diagnostic Data
• Open your Settings app (press Windows Key + I).
• Click on Privacy & security in the left sidebar, then select Diagnostics & feedback.
• Toggle Send optional diagnostic data to Off.
• Scroll down, expand Delete diagnostic data, and click the Delete button to clear what Microsoft has already cached on your machine.
2. Blind the SmartScreen URL Tracker
• In Privacy & security, click on Windows Security at the top, then open App & browser control.
• Click on Reputation-based protection settings.
• Turn off both Phishing protection and SmartScreen for Microsoft Edge.
(Note: This stops Windows from sending your clicked URLs to Microsoft servers for scanning, so ensure you use a privacy-first browser extension like uBlock Origin or uBlock Origin Lite and a good security app like Emsisoft to handle malicious site filtering and potential malware incursions locally).
3. Shut Off Activity History
• Go back to Privacy & security and click on Activity history.
• Uncheck Store my activity history on this device.
• Toggle Send my activity history to Microsoft to Off.
4. Create and Use a Local Account in Windows
The ultimate way to separate your personal identity from your machine’s GDID is to stop logging into Windows with a Microsoft Account (@outlook.com or @hotmail.com). Go to Settings > Accounts > Your info and click Sign in with a local account instead. This keeps your user profile completely offline.
In the modern digital age, privacy isn’t a guarantee. We all need to fight for our privacy while assuming nothing we do online is private.
A couple of days ago, we wrote an article updating you on the state of Cloudeight and TC’s slow but encouraging recovery. In expressing our gratitude, we asked for your donations to help us get through this difficult time. Your response has been nothing short of amazing, and we thank you from the bottom of our hearts.
If you haven’t donated yet and can afford a few dollars, we hope you’ll consider making a small donation. Every dollar helps us in our quest to get things back to normal and continue our mission to help you avoid scams, stay safe online, and offer computer help and advice you can count on and trust.