Live data from Hacker News

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

blog.laserphile.com

311–320 of 348 posts

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#313
post #55

Earlier quoted context omitted.

I have Prime, but I can't imagine installing the Amazon app either. The website works just fine.

With Firefox, yes. I wouldn't fully trust other browsers to care about my privacy.

Firefox the privacy browser that is directly selling all its users searches to Google for decades? Not to mention all its other build in telemetry and ads.

If you want an actual private Firefox Browser use a fork like Mullvad Browser, LibreWolf and Tor Browser.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#314
post #17
post #13

Just curious, why silent sound would allow fingerprinting? What are they sampling if it can't be heard?

The script generates a known waveform, it is passed through the browser's audio implementation and then the script analyses the result after. Based on your devices settings and hardware the output will be different, e.g. a PC with analog output might have 44KHz audio output bandwidth, but a bluetooth headset might have a lower, different audio bandwidth. That is a datapoint that can be used in device fingerprinting a…

What surprises me is that this (additional) fingerprinting is actually needed, in the sense of "don't they have enough from everything else"? Also, if I understood this blog post correctly [0], there is only 2 predominant values from this fingerprinting (?).

[0]: https://ritter.vg/blog-webaudio_alibaba.html

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#315

Earlier quoted context omitted.

So what? I install 0 ecommerce mobile apps. What, I suddenly need to buy Alibaba crap and I can't wait to get to a laptop browser?

You've moved the goal posts there. "Why would anyone install a random app" "Why would anyone use a phone to make a purchase" -- Globally, more than half of all eCommerce purchases are made on a phone or tablet.

[deleted]

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#316
post #9
post #8

I noticed in the last few weeks that if I’d recently opened the AliExpress iOS app (ie. it was backgrounded) my car audio would freak out thinking I was giving it an audio command. Killing the AliExpress app immediately fixed the problem. After seeing it happen more than once I assumed it was something dodgey and uninstalled the app.

I cannot ever imagine installing something like AliExpress as an app.

They're all doing some level of this

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#317
post #167

Earlier quoted context omitted.

Absolutely crazy the amount of dodgy apps people install and giving permissions to read the system when asked...

Yesterday on here, somebody was demo'ing a sun clock website that asks for your position....... ....and yes, many HN'ers were clearly happy to give there precise GNSS coordinates to some random scrote who askes for them.

What's the threat scenario here? Unless you Saddam Hussein...

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#318
post #35

Earlier quoted context omitted.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

This is not about the products that are shipped, but the app itself. I would caution people to never install it as well.

Do you trust the X app? Whatsapp? gmaps? Where do you draw the line?

Is it one of these HN usual "ChInA BaD" psychosis ?

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#320

Earlier quoted context omitted.

So what? I install 0 ecommerce mobile apps. What, I suddenly need to buy Alibaba crap and I can't wait to get to a laptop browser?

You've moved the goal posts there. "Why would anyone install a random app" "Why would anyone use a phone to make a purchase" -- Globally, more than half of all eCommerce purchases are made on a phone or tablet.

>Globally, more than half of all eCommerce purchases are made on a phone or tablet.

For no good reason in places where the phone is not the exclusive access many have to the internet (like it's for many people in the poorer places in Africa for example).

(And the number likely includes things like food delivery and digital goods like game assets and apps themselves)

Post reply on HN