AliExpress was silently running audio in your browser to fingerprint and track your device

Recent reporting indicates that the e-commerce platform AliExpress, owned by Alibaba, has been utilizing covert methods to collect data from users visiting its platform. Specifically, researchers have found that the platform runs silent audio inside web browsers to perform WebAudio fingerprinting. This technical mechanism enables the tracking and identification of user devices without the knowledge or explicit consent of the individuals browsing the site. Coverage notes that a Bluetooth glitch initially exposed this covert data collection practice, bringing hidden tracking methods to public and technical attention.

Outlets such as Mezha, gHacks, CyberInsider, Cybernews, and TechSpot have actively covered the discovery, detailing how user audio systems are leveraged for device identification. These publications emphasize the technical nature of the tracking, explaining that WebAudio fingerprinting relies on how a device processes audio signals to create a unique identifier. The reporting highlights that this practice operated silently in the background while users navigated the AliExpress website, raising significant privacy questions regarding browser-based surveillance techniques. This unfolding situation adds to ongoing discussions surrounding digital privacy, corporate data collection, and the methods large technology and e-commerce conglomerates use to monitor consumer activity.

Device fingerprinting techniques have long been a subject of scrutiny among security researchers because they allow trackers to bypass traditional cookie controls and persist even when users clear their browser storage. The involvement of a major global platform like Alibaba places renewed focus on how web standards and browser architectures handle underlying hardware capabilities without explicit user authorization. As the story develops, coverage does not yet specify official regulatory responses, potential legal penalties, or whether Alibaba plans to alter its WebAudio practices in response to the findings. Observers and users will need to monitor further technical analyses from security researchers to see if similar tracking methods are uncovered on other platforms or if browser vendors implement new safeguards to restrict silent audio utilization.