Technical deep dive: How AliExpress WebAudio fingerprinting hijacks Bluetooth audio
xiaohu · x · 2026-08-23
This technical blog details the investigation into why AliExpress pages disrupt multipoint Bluetooth headphones. The author found that mobile audio cuts out seconds after page load despite no visible media. By hooking into the AudioContext constructor, the author identified scripts collina.js and fireyejs.js creating audio contexts. These scripts generate a fixed sawtooth wave, exploit minute calculation differences across devices to create a fingerprint, and set volume to 0 to stealthily occupy the audio channel.
Related event: AliExpress Caught Using Silent Audio for Device Fingerprinting(5 posts)→
More from Safety
- Polymarket prices 28% odds a US state enacts data center moratorium by year-end — Polymarket · 2026-10-16
- Prompt-injection test: general-purpose decision models catch 17/18 attacks, Shieldstral only 6/18 — WolframRvnwlf · 2026-10-16
- Researcher shows WhatsApp chat history can be permanently rewritten by editing the local message DB — cyb3rops · 2026-10-16
- Top mathematician Tsimerman founds MAISI safety institute, with $10M in OpenAI API credits — burny_tech · 2026-10-16
- Security firm decompiles on-chain propAMM to Rust, finds critical bug risking $6.1M — banteg · 2026-10-16
- Claude Code 2.1.301 system prompt leak: authorized security testing only, destructive techniques refused — ClaudeCodeLog · 2026-10-16