AliExpress Uses Headphones to Track Users
AliExpress was found to secretly use WebAudio API to generate audio fingerprints of users' devices via headphones, enabling tracking without cookies. The method exploits subtle audio signals undetectable to users and collects additional device data.
Consensus
- AliExpress uses a hidden mechanism to track users' devices.
- The tracking method involves generating an audio fingerprint using the WebAudio API.
- The audio signal is inaudible to users and does not affect sound output.
- The technique collects device-specific data including Canvas, WebGL, memory, WebRTC, and mouse movement patterns.
- The method is part of digital fingerprinting technology used to identify devices without cookies.
- The issue was discovered by a developer using Bluetooth headphones.
- Closing the AliExpress page stops the tracking process.
Points of divergence
- The scripts generate a sawtooth acoustic signal and send it to the output at zero volume. — riamo
- The tracking method was discovered when Bluetooth headphones failed to switch from computer to phone. — vesti
- The audio stream maintains Bluetooth connection, preventing device switching. — riamo
- The collected data is sent to Alibaba's servers. — vesti
- AliExpress has not officially commented on the finding. — riamo
- The European Commission previously fined Alibaba 550 million euros for selling counterfeit goods. — vesti
Coverage (2 sources)
- AliExpress secretly uses headphones to track users — РИАМО
- AliExpress suspected of spying on users through headphones — Вести