Search code examples
guidprivacymac-address

How easy is it for a GUID you generate to identify you?

I hear that the creator of the melissa worm was convicted based on the fact that the GUIDs generated could be linked back to a MAC Address of a computer he used.

How hard is it to do this? And what data do they need other than the GUID? Like the MAC Address itself or the time it was created?

Solution

  • That relates to a specific version 1 UUID included in the office document that contained the macro virus, this was becuse it came from UuidCreate/Sequential which did contain MAC info;

    For security reasons, UuidCreate was modified so that it no longer uses a machine's MAC address to generate UUIDs. UuidCreateSequential was introduced to allow creation of UUIDs using the MAC address of a machine's Ethernet card.