Researchers have uncovered a surprising way in which a simple e-commerce tab can quietly change how audio devices behave. The issue involves Bluetooth technology, though it's not exclusive to it. It started with a seemingly minor glitch on the homepage of AliExpress, a popular Chinese e-commerce site. Without any actual sound being played, Bluetooth headphones connected to a computer suddenly stopped switching between calls and music from a smartphone. Upon closer inspection, researchers found that AliExpress runs two background scripts named Collina and FireEye. These scripts use a browser feature called the WebAudio API to create virtual audio graphs. Specifically, the page generates an inaudible sound wave and connects it to the computer's audio output. The browser and operating system then treat this stream as active, effectively locking the sound card. This technique is known as audio fingerprinting.
Audio fingerprinting works by taking advantage of the fact that each sound card, driver, and operating system processes digital signals with subtle, unique variations. By analyzing how the browser calculates this invisible sound wave, AliExpress can generate a unique digital fingerprint of a user's computer. When combined with data like processor activity or mouse movements, this fingerprint can identify a device without using traditional tracking tools like cookies.
As cookies become less effective for tracking online behavior, more websites are turning to invasive fingerprinting techniques to monitor user activity. However, the uncontrolled execution of third-party scripts on browsers can pose real security risks and cause unexpected software conflicts. While blocking these scripts using network filters can help users regain control over their hardware, it may also lead to issues with website functionality. This raises an important question: how much should users tolerate security mechanisms that take control of their devices without their knowledge?
The discovery highlights the growing tension between online security and user experience. While users want protection from invasive tracking, they also expect websites to function properly. Finding the right balance between privacy and usability remains a challenge for both developers and users.
E-Commerce Site Found Using Audio Fingerprinting to Track Users
AI-rewritten from original reportingHow it works
audio-fingerprintingaliexpresswebaudio-apitrackingbluetoothsecurity-risk



