AliExpress Caught Using Silent Audio Scripts for Browser Fingerprinting
A security researcher discovered that AliExpress employs hidden audio objects within its browser anti-abuse tools to generate device fingerprints. The scripts inadvertently routed silent audio to live system outputs, causing Bluetooth headphones to connect unexpectedly. Privacy-focused browsers like Firefox and Brave already implement countermeasures that inject random data or normalize outputs to neutralize such techniques.
Commentary
WebAudio fingerprinting highlights the persistent challenge of invisible user tracking, where websites collect hardware characteristics without relying on traditional cookies. While platforms argue these scripts are necessary for fraud detection, the lack of transparency and overbroad profiling warrant strict regulatory scrutiny regarding proportionality and consent. Organizations and users looking to mitigate these tracking methods should consider deploying privacy-oriented browsers or extensions that randomize hardware and API responses.
The Quote to Remember
“The execution violated the one rule fingerprinting has - stay invisible”
“AliExpress was trying to discretely track users, but was thwarted by Firefox's anti-fingerprinting technology”