Digital Event Horizon
AliExpress, a Chinese e-commerce giant, has been caught using an outdated technique to fingerprint users' browsers, despite efforts by browser makers to mitigate such tracking methods. Learn more about how the company's use of inaudible sounds to identify users has raised questions about its commitment to user privacy and the ongoing battle between browser makers and website publishers over user tracking.
AliExpress, a Chinese e-commerce giant, has been caught using an outdated technique to fingerprint users' browsers. The technique relies on inaudible sounds to identify users and tailor content to individual preferences. The method was found to be ineffective in modern browsers due to improvements made by Firefox and Chrome developers. Browser developers have implemented their own unique audio processing libraries to make it harder for websites to identify users. AliExpress's use of the technique raises questions about the company's commitment to user privacy. The discovery serves as a reminder of the ongoing battle between browser makers and website publishers over user tracking.
AliExpress, a Chinese e-commerce giant, has been caught using an outdated technique to fingerprint users' browsers, despite efforts by browser makers to mitigate such tracking methods. According to a researcher who stumbled upon the technique by accident, the company was using inaudible sounds to identify users and tailor its content to their individual preferences. This method, which measures the unique patterns of audio output from browsers, was found to be ineffective in modern browsers due to improvements made by Firefox and Chrome developers.
The technique, which relies on the subtle differences in audio output between various browsers and operating systems, was once thought to be a reliable way for websites to track users. However, browser developers have taken steps to reduce the effectiveness of such methods, implementing their own unique audio processing libraries to make it harder for websites to identify users.
The researcher, Matthew Callaghan, discovered the technique while investigating strange behavior with his Bluetooth headphones. He found that every time he loaded the AliExpress website, his audio stopped playing, only to resume when he closed the tab. By analyzing the WebAudio readings of each visiting browser, Callaghan was able to identify the presence of the inaudible sound fingerprinting technique.
AliExpress's use of this technique raises questions about the company's commitment to user privacy. Despite its efforts to employ a range of tracking methods, including canvas rendering, WebGL renderer information, and device motion and orientation, the company's use of the inaudible sound fingerprinting technique appears to be an artifact from years past. It is likely that the company was using this method due to the high variability in different math libraries, which made it a reliable way to identify users.
However, the discovery of this technique serves as a reminder that browser makers are constantly racing to stay ahead of website publishers who seek to exploit vulnerabilities in tracking methods. As browser developers continue to improve their security features, it is essential for website publishers to take notice and adapt their tracking methods to ensure they remain effective.
In conclusion, AliExpress's use of inaudible sounds to fingerprint browsers is a concerning development in the ongoing battle between browser makers and website publishers over user tracking. While the technique has been largely rendered ineffective by browser developers, it highlights the need for continued vigilance and innovation in the fight for user privacy.
Related Information:
https://www.digitaleventhorizon.com/articles/Inaudible-Sounds-Used-to-Fingerprint-Browsers-Exposed-AliExpress-Caught-Red-Handed-deh.shtml
https://arstechnica.com/security/2026/08/aliexpress-caught-fingerprinting-visitors-after-sending-inaudible-sounds-to-browsers/
Published: Mon Aug 24 19:45:40 2026 by llama3.2 3B Q4_K_M
