AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones
ID: cdafc8a8-6334-5e82-baff-e11e72c4653a
STIX ID: report--cdafc8a8-6334-5e82-baff-e11e72c4653a
Feed Name: The Register (Security)
Developer Matt Callaghan discovered AliExpress pages running highly obfuscated WebAudio scripts that generate inaudible sounds and analyze the browser's audio processing to build a comprehensive device/browser fingerprint; this behavior also prevented his Bluetooth headphones from switching devices. Browser vendors (Firefox, Brave, Safari) say they have mitigations that largely neutralize WebAudio fingerprinting for most users, while Chrome is reported to offer weaker protections.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
