AI Weekly Malaysia

Developer Matt Callaghan discovered AliExpress uses obfuscated WebAudio scripts to fingerprint browsers by generating silent sawtooth waveforms, measuring the resulting frequency data through the browser's audio implementation, and combining it with screen dimensions, device memory, WebGL rendering, and mouse event data into an encrypted telemetry payload. The zero-gain audio is inaudible but still activates the browser's audio path, which caused his multipoint Bluetooth headphones to stop playing phone audio whenever an AliExpress page loaded. Firefox and Brave reportedly have protections against this technique.

Why: If you build web apps that use the WebAudio API, understand that zero-gain audio graphs still engage OS-level audio paths and can interfere with user hardware like Bluetooth multipoint devices—a real UX bug vector. If you care about user privacy, this is a concrete example of how browser fingerprinting goes beyond cookies and canvas, combining audio hardware characteristics with device telemetry; check whether your browser's anti-fingerprinting settings (Firefox/Brave) are enabled if you serve users in SEA where AliExpress traffic is high.