- Joined
- Mar 3, 2021
AliExpress wasn't recording users but instead playing a silent sound and measuring how users' specific devices processed it in order to fingerprint them.
- Brave's post exposes AliExpress using silent WebAudio API graphs with oscillators and analyzers to fingerprint devices via subtle audio processing differences, as part of broader tracking scripts.
- The technique was uncovered when a user's Bluetooth headphones stayed locked to their PC because AliExpress kept audio contexts active, even with zero gain preventing sound output.
- Brave counters this and other fingerprinting methods by default with randomized audio output data, session resets, and specific script blocks, with added recent GPU protections.
