AliExpress was discovered using a technique to uniquely identify browsers by emitting and detecting inaudible sounds, even though the method is considered outdated. Security researchers found the practice to be concerning despite its age.
Security researchers discovered that AliExpress was employing a method to fingerprint web browsers by emitting inaudible sounds. The technique involves sending high-frequency audio signals—inaudible to humans—through a user’s speakers. The browser’s microphone then picks up these sounds, and subtle variations in the audio capture, caused by the specific hardware and environment, create a unique ‘fingerprint’ for that browser.
While the practice isn’t new, security experts find it unsettling. According to Ars Technica, the technique is considered outdated, but still raises privacy concerns. The core issue is that this method allows AliExpress to track users across the web without their explicit consent or knowledge, bypassing typical privacy protections like cookie restrictions.
The discovery highlights the ongoing battle between website tracking methods and user privacy. Although newer, more sophisticated tracking techniques exist, the fact that AliExpress continues to use this older method demonstrates a willingness to employ any available means to identify and monitor users. The researchers noted that while the technology itself isn’t particularly advanced, its continued use is “creepy,” despite its age.
Read the original coverage
💬 Comments
📜 Comment Policy