AliExpress Uses WebAudio API for User Tracking Without Consent

AliExpress, the global e-commerce platform, has been secretly using the WebAudio API to track users and create detailed device fingerprints without their knowledge or consent. A developer named ‘laserphile’ discovered this practice while experiencing audio issues with their Bluetooth headphones when the AliExpress website was open. The site plays inaudible audio signals at zero volume, measuring hardware differences in how devices process these signals to generate unique digital fingerprints. This covert method allows Alibaba to collect data such as hardware memory, screen dimensions, network information, and more through the WebAudio API. Further analysis revealed the site also gathers data from other sources like canvas, WebGL, WebRTC, and mouse/touch events, forming a comprehensive device fingerprint. The tracking occurs without user awareness, making it a significant privacy concern. Experts recommend using privacy-focused browsers like Firefox or Brave, which can block such fingerprinting attempts and randomize data to protect users. This incident highlights the growing risks of online surveillance and the importance of digital privacy measures.