HeadlinesBriefing favicon HeadlinesBriefing.com

AliExpress WebAudio Fingerprinting Blocks Bluetooth

Hacker News •
×

When loading the AliExpress homepage in Firefox or Chrome, my multipoint Bluetooth headphones would stop playing audio from my phone. The issue resolved immediately upon closing the AliExpress tab, indicating the site was actively interfering with system audio routing.

Investigation revealed two hidden Web Audio contexts created by obfuscated scripts: collina.js and fireyejs.js, both hosted under assets.aliexpress-media.com/g/AWSC/. These scripts build a Web Audio graph using a sawtooth oscillator connected to an analyser node, script processor, and a gain node set to zero, then route it to AudioContext.destination. This live audio processing keeps the Bluetooth audio path active, preventing device switching.

The scripts also collect extensive browser fingerprinting data including canvas rendering, WebGL information, audio outputs, screen dimensions, device memory, and WebRTC behavior. This comprehensive fingerprint likely serves anti-fraud and user tracking purposes.

Blocking both script URLs via uBlock Origin filters resolves the issue. The filters are narrowly scoped to prevent unintended site breakage, though blocking may trigger additional CAPTCHAs or checkout issues.