logo

AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones

ID: cdafc8a8-6334-5e82-baff-e11e72c4653a

STIX ID: report--cdafc8a8-6334-5e82-baff-e11e72c4653a

Feed Name: The Register (Security)

Threat Score
30/100

Date Published: 2026-08-24

Date Updated: 2026-08-25

...
...

Developer Matt Callaghan discovered AliExpress pages running highly obfuscated WebAudio scripts that generate inaudible sounds and analyze the browser's audio processing to build a comprehensive device/browser fingerprint; this behavior also prevented his Bluetooth headphones from switching devices. Browser vendors (Firefox, Brave, Safari) say they have mitigations that largely neutralize WebAudio fingerprinting for most users, while Chrome is reported to offer weaker protections.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.