hackernews.pink

Top Stories Trending New For You Bookmarks Pink Dossier

hackernews.pink

1059 points•337 comments•1w ago•by emctech•blog.laserphile.com ↗

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

A researcher found that AliExpress loads two obfuscated WebAudio scripts, collina.js and fireyejs.js, which create hidden audio-processing graphs on the page. The graphs connect to the system audio destination with a zero-gain node, causing the browser to keep audio processing active and in one setup interfere with Bluetooth multipoint headphones switching between devices; muting the tab does not stop it since no media element exists. Blocking these scripts with uBlock Origin prevented the hidden AudioContext objects from being created, restoring normal audio playback.

Discussion (337)

No comments yet

Top
Trending
New
For You
Bookmarks
Dossier