He was 19 years old, bouncing his connection across three countries, watching his IP change in real time.
He thought he was invisible.
He was not even close.
Peter Stokes was an alleged member of Scattered Spider, one of the most prolific cybercrime groups on the planet. Over $100 million in ransom payments. Social engineering so good it bypassed security teams at major corporations. The group was untouchable for years.
Peter thought he had the technical side covered. VPN running. IP rotating. Multiple countries between him and anyone looking. He was boarding a flight to Japan from Helsinki when Finnish and US law enforcement walked up and arrested him.
The VPN worked perfectly.
That was never the problem.
While Peter was carefully masking his network traffic, his Windows machine was quietly doing something he never accounted for. Every Windows installation carries a Global Device Identifier. A GDID. A unique number tied to the hardware itself that Microsoft uses for telemetry. It does not care about your VPN. It does not reset when your IP changes. It just sits there, logging activity and reporting home.
Web history. Gaming sessions. Tools used. IP addresses across every session. Azure activity. All of it timestamped. All of it tied to one persistent identifier that survived every VPN hop he ever made.
Microsoft handed that data to the FBI.
Court documents suggest investigators had a complete picture of his activity before the prosecution even started building its case.
The VPN protected his traffic.
The OS documented his life.
He secured one layer and forgot about everything running underneath it.
That is the lesson. A VPN is not a cloak. It is one control in a stack that includes the operating system, the hardware, the apps, and every service quietly phoning home in the background.
Securing your network traffic while running a stock Windows install is like locking your front door and leaving every window open.
The number he never knew existed put him on a plane back to face charges.
A 19 year old kid used a VPN and change his IP across 3 countries but the FBI was still able to catch him and that’s because windows was tracking a number he didn’t even know existed….
I’ve stopped honing my skills as a Web2 pentester to go all-in on Web3. Lately, I’ve started questioning how much of a future there really is here, or whether even the people working in this space are simply living off speculation.
With the recent closure of @code4rena , another door has been shut. It honestly saddens me to see the current state of entering Web3. Sometimes I genuinely wonder how possible it is today to land a Web3 job at a young age.
The issue is that if companies stop giving juniors opportunities, where will future seniors come from? AI is only a tool. If you don’t know how to guide it or review its output, what it creates may be useful in the short term, but not sustainable.
I believe Web3 is necessary for the good of humanity and decentralization. It’s a fascinating technology, but I can see it heading in the same direction as Web2 with AI. Companies increasingly believe one senior developer with AI can replace several juniors.
Announcing the Solidity Testing Handbook ✨
Fully free, one-stop resource for Solidity developers and security researchers.
Resources are currently scattered across blogs, docs, and forums. I found it difficult to keep track of everything in one place.
This handbook aggregates all testing patterns from basic unit tests to advanced mutation tests into a single, well-organized guide for quick reference.
It’s built from my own learnings and best practices observed in popular codebases.
soliditytestingbook.com
@0xasp_@devtooligan I hope you go far in your career. Without quality free resources like this, the average skill level would stagnate very quickly, and only a few would have a monopoly on knowledge. People like me owe our success to these resources. Thank you.
For those just getting started with Solidity and/or Foundry, I want to share some resources I’ve found very useful. They aren’t as well known as Cyfrin’s Solidity course, but they’re still excellent.
467 Followers 2K Following🎥 Movies | Series | Honest Reviews
Breaking down plots, characters & hidden details.
No spoilers (unless I warn you 😉)
#MovieTwitter
419 Followers 1K FollowingElectrical Eng., Consultant, Solar energy expert and sales, Computer Eng., software systems engineer, CCTV and solar camera pioneer in Uganda.
2K Followers 3K Following📌 Professional photographer/videographer
📌 Content creator
📌 Fashion
📌 product managing/Branding
📌Real Madrid
Dm for bookings or at [email protected]
6K Followers 7K FollowingSizler için her gün komik, eğlenceli ve eğitici videolar paylaşıyorum. Takip ederek ve beğenerek büyümemi sağlayabilirsiniz 😊
#funny #viralvideo
400 Followers 896 FollowingBackend developer ❤️ Geologist 🔨 🪨 I love life❤️ I love challenges, I love to learn// web3 content writer// Moderator//Airdrop Farmer 👩🌾
933 Followers 1K FollowingI’m a hustler , and a very honest person . A hairstylist, liquid soap souvenir vendor. I’m a woman who hates wahala and liars . I love music ,swimming
676 Followers 872 Following.Together, we can achieve more through innovation, transformation, and invention.
~Electrical Engineering Student at University of Juba.
God's lonely man 😇✊️
55K Followers 7K Following🌺If you enjoy my channel, please subscribe to support us on our journey to preserve traditional culture and enhance human moral values.🌹⚡️🌺
17K Followers 167 FollowingReading the declassified JFK Files and posting the good stuff. What really happened? Who did it? The Truth shall set you free.
10K Followers 88 Followingbuilding solutions to secure worlds. all thoughts / opinions (if at all) are my own.
labs @thinkstcanary - prev. founder @deceptiq_ (acq.)
92K Followers 431 Following📚Te enseño a protegerte en https://t.co/h6qiBLhl9b
💻Construyendo con privacidad en https://t.co/WhiqzRtYfc
🗽"Sin privacidad tu libertad es una ilusión"
997 Followers 1K FollowingFather and husband
Ex-concert promoter
Discovered 60+ H/M vulnerabilities in public security contests
I'm currently doing the #RoadToWeb3SecurityJobChallenge