Live data from Hacker News

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

blog.laserphile.com

171–180 of 349 posts

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#172
post #9
post #8

I noticed in the last few weeks that if I’d recently opened the AliExpress iOS app (ie. it was backgrounded) my car audio would freak out thinking I was giving it an audio command. Killing the AliExpress app immediately fixed the problem. After seeing it happen more than once I assumed it was something dodgey and uninstalled the app.

I cannot ever imagine installing something like AliExpress as an app.

But isn’t the promise of the app store that the apps are checked for malicious code and more control of the permissions compared to a browser website?

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#174
post #157

I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to c…

I wish the browser would classify the fingerprinting and not load the site and show a security risk warning like it does for http sites. Then Advanced > Accept risk to continue.

@FireFoxDudes You need to be addressing fingerprinting

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#175
post #59

With my previous hearing aid I noticed that visiting a wide variety of web sites would cause a change in the amplification of environmental noise. I always assumed it was doing something with Bluetooth, and probably not for a good reason. This is with an iPhone 13 and one Kirkland/phonak hearing aid. I haven’t noticed this recently, but I also now have two newer Phonak hearing aids and a few iOS updates have happened…

It seems far more likely that your cheap hearing aids are sensitive to certain RF frequencies and the background javascript is causing different patterns of load on the phone's CPU.

I would suspect that this only happens when you're charging and it is likely the charger or cable not being properly shielded.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#176
post #59

With my previous hearing aid I noticed that visiting a wide variety of web sites would cause a change in the amplification of environmental noise. I always assumed it was doing something with Bluetooth, and probably not for a good reason. This is with an iPhone 13 and one Kirkland/phonak hearing aid. I haven’t noticed this recently, but I also now have two newer Phonak hearing aids and a few iOS updates have happened…

I wear Phonak CI processors. It's not just you. I've also experienced the volume drop on a few sites and apps. The Amazon iOS app does this. Each time I leave the app, ambient audio returns to normal.

They’re kindly turning down the background noise so you can focus on shopping and buying more stuff.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#177
post #48
post #45

Earlier quoted context omitted.

AE website on mobile is terrible, they basically force you to use the app. I exclusively use the website on my PC

So they're pulling a Reddit, basically. "The app is great because the website is heavily degraded".

Reddit is fine, just a small popup at the bottom. Facebook kn the other hand turned off most functions on mobile, e.g. chat. Good thing though if you don't use the chat long enough, friends start using other means of communication.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#178
post #157

I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to c…

I wonder if it is something firefox and chrome devs need to look at because if it is accessing the audio device surely it should be notified to the user.

As I mentioned, I suspect that this is an active choice, as just displaying the icon whenever a media context exists seems much easier than inspecting the audio stream for non-zero volume media.

I can only assume that there are legitimate reasons for this as well, e.g. websites preparing/maintaining audio context for lower latency when they intermittently play audio etc.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#179

Earlier quoted context omitted.

I believe the prices are the same. But the app has a number of "games" to collect tokens that get credited as discounts. Seems to be mostly stuff designed to get you to open the app daily and browse their offers. Which might be "innocent" if it's just to get you to buy more stuff, or maybe they have more reasons they want you to have the app open. Who knows At least Aliexpress doesn't have all the fake slot machine t…

There are few things more scammy than AliExpress “discounts”. I have yet to see a cent of the hundreds of dollars of “savings” they gave or advertised to me.

Very true, I almost never use Ali Express because I have no clue what anything is going to cost until I get to roughly the final step of checking out.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#180

Are there any EU/GDPR laws against fingerprinting?

Yes. In this case probably not allowed because not strictly necessary (cookie law) and therefore needs consent from user.

Do we have any jurisprudence on fingerprinting?
Post reply on HN