Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

blog.laserphile.com

Post reply on HN
Print view View original

31–40 of 347 posts

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#31

Post by afandian »

MisterTea wrote: post #28
nkjoep wrote: post #16

JS enabled by default seems every day less secure.

IMO web browser have been enabling all sorts of obnoxious behavior since before JS. One of my all time favorites were the sites that opened pop-ups in a loop faster than you could close them while an audio clip of a guy yelling "Hey everyone! I'm looking at gay porn!" You had to hit reset. Fuck the Web.

The web around the late 90s and early 2000s had some really sketchy stuff. I think the difference is that it used to be the sleazy underbelly. Now it's accepted as mainstream.

My local 'newspaper' website is chock full of scam adverts. The print version is dignified. The website people, somehow, turn a blind eye.

And I got an advert on Youtube this week using sexually explicit language to sell pills.

Feels like standards, and expectations, have really slipped.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#32

Post by [deleted] »

robtherobber wrote: post #5
emctech wrote: post #4

Earlier quoted context omitted.

Yes, I find it concerning too. I particularly dislike that windows was not aware, nor could it stop the audio stream from effecting the hardware. What other side channels like that exist? Perhaps I can be blamed for using windows

> Perhaps I can be blamed for using windows That would be unreasonable, I argue. No one should have to worry about the security of their devices and data privacy based on which OS they use. Whilst it can be argued that different OSs serve different needs, privacy and security should not be debatable. In fact, most countries have dedicated legislation for this; whether it's just, applied correctly, or serves the publi…

[deleted]

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#33

Post by ngl999 »

fragmede wrote: post #26
unixhero wrote: post #21

Earlier quoted context omitted.

It's great for shopping. But in the US you have amazon prime. We don't.

Where is "we"?

Likely the place where people are "willing to trade privacy for convenience", according to Baidu's CEO.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#34

Post by lovestory »

lukeify wrote: post #9
patspam wrote: post #8

I noticed in the last few weeks that if I’d recently opened the AliExpress iOS app (ie. it was backgrounded) my car audio would freak out thinking I was giving it an audio command. Killing the AliExpress app immediately fixed the problem. After seeing it happen more than once I assumed it was something dodgey and uninstalled the app.

I cannot ever imagine installing something like AliExpress as an app.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#35

Post by 63stack »

lovestory wrote: post #34
lukeify wrote: post #9

Earlier quoted context omitted.

I cannot ever imagine installing something like AliExpress as an app.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

This is not about the products that are shipped, but the app itself. I would caution people to never install it as well.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#36

Post by nntwozz »

dogman1050 wrote: post #29
unixhero wrote: post #21

Earlier quoted context omitted.

It's great for shopping. But in the US you have amazon prime. We don't.

I have Prime, but I can't imagine installing the Amazon app either. The website works just fine.

This is the way. It's prudent to treat apps with skepticism, it's unfortunate it's come to this.

I study Apple's Privacy Nutrition Labels religiously every time I consider installing an app.

I like the ones with "Data Not Collected".

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#37

Post by aureate »

lovestory wrote: post #34
lukeify wrote: post #9

Earlier quoted context omitted.

I cannot ever imagine installing something like AliExpress as an app.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

I buy directly from AliExpress all the time. I wouldn't install their app.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#39

Post by ohyoutravel »

lovestory wrote: post #34
lukeify wrote: post #9

Earlier quoted context omitted.

I cannot ever imagine installing something like AliExpress as an app.

You probably buy things off amazon that are dropshipped from AliExpress all the time. Stop with the elitism

Love Temu and AliExpress for specialized components at dirt cheap prices. I would never, ever install their app. Ever, security nightmare.

Similar to how I use Amazon Prime but would never order something I ingest, put on my skin, or (usually) wear from it.

Not elitest.

Re: AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

#40

Post by SirFatty »

ngl999 wrote: post #14
patspam wrote: post #8

I noticed in the last few weeks that if I’d recently opened the AliExpress iOS app (ie. it was backgrounded) my car audio would freak out thinking I was giving it an audio command. Killing the AliExpress app immediately fixed the problem. After seeing it happen more than once I assumed it was something dodgey and uninstalled the app.

It's known that some Chinese mobile apps employ this trick to keep the app alive in the background, the rumor is that this way the 'active user' KPI can be better met. edit: quantity qualifier

If it's known, are you suggesting that Apple and Google are complacent in allowing these type of apps in their ecosystem?
Post reply on HN