Live data from Hacker News

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

blog.laserphile.com

251–260 of 348 posts

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#251
post #220
post #190

Earlier quoted context omitted.

I feel like there are two levels of fingerprinting here, and a lot of the confusion is downstream of not properly distinguishing them: There's the kind that tries to find out what browser vendor, OS, and sometimes hardware you use, and the kind that tries to identify you across visits, unrelated origins etc. I agree that the former is probably inherently impossible to avoid to a large extent, but the latter is both a…

I've only encountered the latter described as fingerprinting. Which makes sense side, like fingerprints, the information is being used to uniquely identify an individual. The former is traditional analytics and is not enough to uniquely identify an individual. Not all analytics are as privacy invasive as fingerprinting.

>The former is traditional analytics and is not enough to uniquely identify an individual

shockingly little information is required to uniquely identify someone.

"traditional analytics" (lets just say os + browser + some hardware info) is likely to be uniquely identifying when combined with just one other sparse dataset.

>Not all analytics are as privacy invasive as fingerprinting.

fingerprinting isn't a separate category of analytics. every data point can be (and often is) used for fingerprinting.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#252
post #19

Earlier quoted context omitted.

Will do! edit - How do i do this? through github issues? https://github.com/uBlockOrigin/uAssets/issues

They said they aren't interested

You can also submit to the EasyPrivacy list or one of the AdGuard lists.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#253
post #218

Earlier quoted context omitted.

It's the Bluetooth; when Bluetooth connects most hearing aids reduce the environmental volume slightly so you can hear the streaming content. Some app has started to play audio (perhaps silently). I notice it on some websites. How much HAs reduce environmental sounds when streaming is configurable by the way, but only by the audiologist if you don't have your own programmer. I don't like the effect and prefer to just…

Is this tunable per hearing program? When in an even moderately noisy environment I find myself switching to AirPods if I’m streaming. I would love for the HA to give separate controls for BT audio vs ambient like AirPods do.

[deleted]

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#254
post #59

With my previous hearing aid I noticed that visiting a wide variety of web sites would cause a change in the amplification of environmental noise. I always assumed it was doing something with Bluetooth, and probably not for a good reason. This is with an iPhone 13 and one Kirkland/phonak hearing aid. I haven’t noticed this recently, but I also now have two newer Phonak hearing aids and a few iOS updates have happened…

It seems far more likely that your cheap hearing aids are sensitive to certain RF frequencies and the background javascript is causing different patterns of load on the phone's CPU. I would suspect that this only happens when you're charging and it is likely the charger or cable not being properly shielded.

> cheap hearing aids

I don't think you know what you are talking about

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#255
post #157

I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to c…

Recently I have been getting a request from chrome for access to local network devices. I can’t figure out which site I’m visiting is doing this, because the request doesn’t specify which tab. I would LOVE a little icon for something like that.

Something in my work's SSO / auth mechanism does this and if you click No it silently screws up the internal website you're visiting. It doesn't block you from logging in, just parts of the site don't load/work. I haven't been able to get a good answer on what the heck is going on but it's extremely annoying.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#257
post #157

I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to c…

I wonder if it is something firefox and chrome devs need to look at because if it is accessing the audio device surely it should be notified to the user.

Not just notified but blocked by default. We already have similar bocks on autoplaying video (no audio until you interact) and access to microphones and cameras ("allow access.." popups).

Every time an article like this comes out, people wonder about aliexpress instead of why their browser allows this in the first place.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#259
post #59

With my previous hearing aid I noticed that visiting a wide variety of web sites would cause a change in the amplification of environmental noise. I always assumed it was doing something with Bluetooth, and probably not for a good reason. This is with an iPhone 13 and one Kirkland/phonak hearing aid. I haven’t noticed this recently, but I also now have two newer Phonak hearing aids and a few iOS updates have happened…

It seems far more likely that your cheap hearing aids are sensitive to certain RF frequencies and the background javascript is causing different patterns of load on the phone's CPU. I would suspect that this only happens when you're charging and it is likely the charger or cable not being properly shielded.

Audio is being generated and the BT device is prioritizing it by changing its internal mixer settings. Same as audio prompts over music in a car. This could be mitigated by detecting silence in the audio stream but this is anti-consumer behavior that needlessly drains batteries with excess transceiver activity.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#260
aliexpress is largely a bait and switch site.

most of the prices change during checkout in the most frustrating ways. one u ready to check out, and provide ur payment into, and click to pay... they interrupt this fake checkout with a popover, inform u the price is actually much higher, and dangle a button which is one click to accept the new higher price.

this is total scam behaviour and probably illegal in most US states.

Post reply on HN