Post #3837677
2026-07-15 17:20 UTC
I was asking the same question, quoting that exact excerpt in a different thread… and getting pretty hairbrained responses.
After a little bit of digging, I can see ngrok has a sign in option where you can sign in with a bit bucket account.
I suspect that’s how Microsoft has a record of someone interacting with that specific website.
Still am unclear how the browser has access to this id, which sounds like it’s a registry setting. If browsers are able and willing to just fork over arbitrary registry values when asked, that’s a major issue.
And if it’s not arbitrary… just THAT value, it seems to suggest complicity on the browsers themselves.
Can I see this id egressing my system if I’m snooping with wireshark? I really really want to understand how and when this value is going over the wire.
Replies (1)
-
@nibbler@discuss.tchncs.de 2026-07-15 17:45
if the hacker signed in with his github… I would assume it’s something hidden behind “telemetry” or such - but either way it’s horrible. And the article is bad for just mentioning this without going into detail.