Live data from Hacker News

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

blog.laserphile.com

161–170 of 349 posts

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#162
post #135

Earlier quoted context omitted.

This is not correct. I do not have the app and get tracking for my orders.

I get email updates but whenever I click the track link it tells me I need the app.

I have a package on the way with AliExpress. It is headed from somewhere in China to somewhere in the US.

Using my computer just now, I looked at one of the emails that AliExpress sent about this order. It had a clickable tracking number displayed; I clicked it.

That brought me to their website, where I landed on a page that included the last update for my order and also a link to "View Details".

That works for me. It was very easy to where along the line my stuff is (and that it is not in the US yet).

---

Meanwhile: I also copied the tracking number from the email. I pasted that tracking number into the box at usps.com.

The USPS knows of my tracking number and they do not have my item yet. Fair enough.

I ticked some boxes and told them to send me updates, which I'm sure they'll do once they have updates to send -- just as they have done for ~decades now.

This also works for me.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#163

This is not limited to Bluetooth in any way. In pavucontrol I can see Firefox outputting audio when on AliExpress even though nothing is playing. The uBlock filter fixed it.

> The uBlock filter fixed it.

what filter ?

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#165

This is not limited to Bluetooth in any way. In pavucontrol I can see Firefox outputting audio when on AliExpress even though nothing is playing. The uBlock filter fixed it.

> The uBlock filter fixed it. what filter ?

From the article:

To block the scripts open the uBlock dashboard, select My filters, and add:

    ! AliExpress AWSC fingerprinting scripts
    ||assets.aliexpress-media.com/g/AWSC/uab/*/collina.js$script,domain=aliexpress.com
    ||assets.aliexpress-media.com/g/AWSC/fireyejs/*/fireyejs.js$script,domain=aliexpress.com

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#166
post #59

With my previous hearing aid I noticed that visiting a wide variety of web sites would cause a change in the amplification of environmental noise. I always assumed it was doing something with Bluetooth, and probably not for a good reason. This is with an iPhone 13 and one Kirkland/phonak hearing aid. I haven’t noticed this recently, but I also now have two newer Phonak hearing aids and a few iOS updates have happened…

I wear Phonak CI processors. It's not just you. I've also experienced the volume drop on a few sites and apps. The Amazon iOS app does this. Each time I leave the app, ambient audio returns to normal.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#167
post #9

Earlier quoted context omitted.

I cannot ever imagine installing something like AliExpress as an app.

Absolutely crazy the amount of dodgy apps people install and giving permissions to read the system when asked...

Yesterday on here, somebody was demo'ing a sun clock website that asks for your position.......

....and yes, many HN'ers were clearly happy to give there precise GNSS coordinates to some random scrote who askes for them.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#168

Earlier quoted context omitted.

I would actually love if I could have iOS prompt me to allow certain apps to use the speakers. I hate using an app and suddenly have a video autoplay loudly.

This. This needs to be a thing.

To be fair, it shouldn't need to be a thing.

(One should really not tolerate such dodgy software).

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#169
post #157

I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to c…

I wonder if it is something firefox and chrome devs need to look at because if it is accessing the audio device surely it should be notified to the user.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#170

Earlier quoted context omitted.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

In first world countries, buying from a local reseller grants you customer rights (like returning or replacing defective items).

Not if the local reseller simply calls itself a marketplace and logistics company and the local regulator lets them get away with it.

Amazon, in my experience, does arbitrate disputes about returns and defects, but the important point is that from a legal perspective, I don't think they have to, so you're at their mercy.

You can't even be sure that VAT is handled correctly, which local retailers can usually not get around.

Post reply on HN