1. Forum
  2. sp00knet
  3. SN SECURITY

  • MS Windows File Fingerprinting & Reporting

    From warmfuzzy@700:100/37 to All on Wednesday, November 02, 2022 19:14:45
    A few years back the German security service gave orders to the people in charge of their network infrastructure to not use Windows 8. It appears that Windows, in various versions of the operating system use file fingerprinting to track criminals who are using the Windows OS platforms to go about their business. Here's how it works: Windows would contain a large list of hashed results from analyzed known popular illegal content and report back to Microsoft any "hits" to the known hashes. This would then cause MS to copy the system's GUID (globally unique identifier) and initiate an investigation. Once these "postives" have been found the files become such that they can not be easily deleted. Even renaming the files and then trying to delete them causes issues for those attempting this. In summary, if you are collecting illegal materials that have been thoroughly gone through with hashes created from those files you will be in a world or hurt in short order.

    Cheers!
    -warmfuzzy

    --- Mystic BBS v1.12 A48 2022/07/15 (Linux/64)
    * Origin: thE qUAntUm wOrmhOlE, rAmsgAtE, uK. bbs.erb.pw (700:100/37)
  • From k9zw@700:100/69 to warmfuzzy on Saturday, November 05, 2022 04:18:08
    On 02 Nov 2022, warmfuzzy said the following...

    A few years back the German security service gave orders to the people in charge of their network infrastructure to not use Windows 8. It appears that Windows, in various versions of the operating system use file fingerprinting to track criminals who are using the Windows OS platforms

    Did they do their own Linux Distro in the end?

    --- Steve K9ZW via SPOT BBS

    --- Mystic BBS v1.12 A48 2022/07/15 (Linux/64)
    * Origin: SPOT BBS / k9zw (700:100/69)