ZeroHour
Ars Technica · Securitypublished ()ingested Dan Goodin

Inaudible sounds used to fingerprint browsers catch AliExpress red-handed

lowResearchimportance 30
AI summary · glm-5.3-flash

AliExpress was caught using inaudible audio signals to fingerprint visitors' browsers, an outdated but still-active cross-session tracking technique.

Ars Technica reports that AliExpress fingerprinted site visitors by sending inaudible sounds to their browsers, exposing a legacy audio-based fingerprinting technique in commercial use. The method allows persistent tracking despite the technique being widely considered outdated. The finding highlights that legacy tracking methods remain deployed on major e-commerce properties, raising privacy concerns for defenders and privacy teams.

  • AliExpress used inaudible audio for browser fingerprinting
  • Technique is considered outdated yet remains deployed
  • Enables cross-session and cross-device tracking of visitors
  • Relevant to privacy teams auditing third-party tracking
ProductsAliExpress
OrganizationsAliExpress
Full article

Is the technique outdated? Yes. Is it still creepy? Also yes.

This source does not provide full text. Read it at arstechnica.com.