🔒AliExpress Fingerprinting Visitors With Web Audio Trick
AliExpress Caught Using Sneaky Web Audio to Track You
TL;DR
Researchers found AliExpress uses web audio techniques to track visitors, rendering graphs from browser sound data. Firefox and Chrome have fixes; Safari likely safe.
AliExpress was discovered using an outdated technique that tracks users through inaudible sounds sent to browsers. This method measures WebAudio readings to create a unique fingerprint for each visitor. The technique renders a graph analyzing Sawtooth waves, with scripts setting the gain to zero to prevent audible interference. Firefox fixed this issue starting from version 118 released in 2023, while Chrome's built-in libraries make it ineffective there. Safari users are likely safe due to their browser’s unique setup. This tracking method is one of over a dozen fingerprinting techniques AliExpress employs.
Key Points
AliExpress uses inaudible sounds to measure WebAudio readings for user tracking since discovery by researcher Matthew Callaghan.
Firefox version 118 released in 2023 includes a fix using unique math libraries, making the technique ineffective there.
Chrome ships with its own libraries, rendering the web audio trick useless on Chrome browsers as well.
Safari users are likely safe due to browser's use of unique libraries that prevent such tracking methods from working effectively.
AliExpress employs over a dozen fingerprinting techniques including canvas rendering, WebGL renderer info, and more.
Why It Matters
If you're browsing AliExpress or similar sites, your privacy might be at risk. Firefox users are protected since version 118, but Chrome and Safari users should stay vigilant. This technique highlights the need for robust browser security measures.
Frequently Asked Questions
Why does this matter?
If you're browsing AliExpress or similar sites, your privacy might be at risk. Firefox users are protected since version 118, but Chrome and Safari users should stay vigilant. This technique highlights the need for robust browser security measures.
What happened?
Researchers found AliExpress uses web audio techniques to track visitors, rendering graphs from browser sound data. Firefox and Chrome have fixes; Safari likely safe.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,315 builders reading daily.