Escudodigital AliExpress Caught Using Inaudible Audio for Device Fingerprinting
Article Content
- •AliExpress uses inaudible audio for device fingerprinting without user consent.
- •The technique interferes with Bluetooth audio functionality for some users.
- •Privacy-focused browsers can block the tracking scripts employed by AliExpress.
AliExpress has been accused of employing inaudible audio signals through the WebAudio API to fingerprint users' devices. This technique was uncovered by developer Matt Callaghan, who noticed that his Bluetooth headphones stopped functioning properly when an AliExpress tab was open. The site generates inaudible audio waves at zero volume, which are processed by the browser to identify unique device characteristics. This method allows AliExpress to track users without their consent, as it collects various hardware and software data. Although this fingerprinting technique can help detect fraudulent activities, it raises significant privacy concerns due to a lack of transparency. Users can mitigate this tracking by using privacy-focused browsers like Firefox or Brave, which block such scripts. The incident has sparked discussions about the ethical implications of such tracking methods.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…