Breaking News
Washington Is Fining Him $4,000 a Week… Because He Quit Farming
Frequent Sauna Use Linked to Lower Mortality, Stroke and Dementia Risk, Studies Find
UPDATE: New Details Emerge Regarding the Death of American Legend Dolly Parton
BREAKING: James O'Keefe Drops Undercover Video of DMV Workers Contradicting Murkowski's...
Top Tech News
Portable 1MW Kaleidos Microreactor Secures Critical Nuclear Fuel Deal Through 2030s
This New All-In-One Range Extender Is Ready To Go Into Any Electric Truck
Aptera Reveals The Secret To Building Its Solar EV: China
High-voltage sodium home battery emerges as affordable rooftop solar solution
Peter Thiel-Funded Company Anduril to Triple the Number of Autonomous Surveillance...
China has released Origin Pilot, claimed to be the world's first open-source operating system...
ShieldAI XBAT Drone Fighters Can Give A Fighter Drone Wing to Every US Destroyer
Brain organoids, kept alive more than five years, matured like human brains
Parkinson's patient's tremors VANISH within minutes of GROUNDBREAKING treatment
NEW HOMES ARE BUILT WITH THIS AND IT'S MAKING YOU SICK
Bluetooth Glitch Exposes Alibaba's Secret Tracking Of Users, Developer Says
The privacy-focused Brave browser revealed in a series of X posts that the AliExpress marketplace was keeping the developer's computer audio system active through hidden browser scripts, potentially allowing the website to generate a unique identifier for his device.
The issue emerged when the developer's Bluetooth headphones refused to transfer their audio connection from his computer to his phone while AliExpress was open. A deeper dive of the website's code showed background scripts maintaining access to the computer's audio-processing system without producing audible sound.
The scripts allegedly used the browser's Web Audio API to process signals at zero volume. Small differences in how individual computers handle those signals can be measured and combined into an "audio fingerprint," allowing websites to recognize devices even when cookies are deleted or blocked.
The developer also found that the scripts collected other device characteristics, including available memory, screen dimensions, and network information.
Here's what Brave found:
1. Alibaba's AliExpress was caught using users' audio systems to track them. AliExpress wasn't recording users but instead playing a silent sound and measuring how users' specific devices processed it in order to fingerprint them.
2. Fingerprinting is a way that websites can identify you without cookies. Sites will note details about your device like your screen size or installed fonts. These details are then combined into a unique, persistent "fingerprint" that can be used to track you across the Web.
3. There are slight variations in how each device plays the same audio file due to differences in CPU, sound card, browser, etc. When AliExpress played the silent sound, it measured these small variations to help build fingerprints of users' devices.
4. This tracking was discovered due to an unexpected side effect. A user with Bluetooth headphones noticed they couldn't play music on their phone because the headphones were instead playing AliExpress's silent sound from their PC.