emctech

6 ms·

1.
by emctech 27d ago
Good to know! I have added a note and link to my post.
2.
by emctech 27d ago
The Web Audio API has the ability to extract frequency, waveform, and other data from an audio source, that source is generated at runtime on your device. A firefox developer did a further dive into what the WebAudio based fingerprinting ca
3.
by emctech 27d ago
Perhaps accessing the microphone is something else they do, however that is not the issue in my case nor what my article is about.
4.
by emctech 27d ago
While it may not be effective at fingerprinting, the side effect of the attempt sure is annoying when it stops my music! Do you know if it would count as a bug if muting the firefox tab or the browser as a whole does not stop the audio stre
5.
by emctech 27d ago
I doubt the FBI will be flying to china to knock down any doors! You aren't wrong though, and countries which enforce GDPR I would expect to make noise if this was happening to their constituents.
6.
by emctech 27d ago
Thanks for your input and perspective! Do you think it is a bug that the muting of the firefox tab doesn't stop the audio stream? It is frustrating that companies would use such an annoying tactic to track their users with it also ine
7.
by emctech 27d ago
I touched on this in my article, once the data has been collected and sent to their servers you have no idea what they do with the information. At least with GDPR it is supposed to be regulated but obviously that is not the case everywhere
8.
by emctech 27d ago
ebay does this i think, someone else linked a post about port scanning
9.
by emctech 27d ago
I am glad people like the write up and it is fostering a conversation! It is such a happenstance that i looked into this.
10.
by emctech 27d ago
Thanks for the feedback :D
11.
by emctech 27d ago
It doesn't actually stream an audio file, the scripts generate audio at runtime using a sawtooth oscillator. It also only happens after several seconds.
12.
by emctech 27d ago
Someone else mentioned that cloudflare uses the webaudio for verification challenge, but only triggers it briefly.
13.
by emctech 28d ago
I wonder if it is something firefox and chrome devs need to look at because if it is accessing the audio device surely it should be notified to the user.
14.
by emctech 28d ago
It just annoyed me so much that it was interrupting my music!
15.
by emctech 28d ago
Does it hold an audio stream open constantly or just briefly during the challenge? On AE it never stops
16.
by emctech 28d ago
They said they aren't interested
17.
by emctech 28d ago
The best you can do on the modern web is reduce your fingerprint footprint, though it comes at a cost of websites breaking from JS disabling, or local time zone anonymisation.
18.
by emctech 28d ago
Sorry, this is my first post to HN and in the submission it looked like the description text i added would be part of the post header.
19.
by emctech 28d ago
I use ublock origin and by default it wasn't blocking, i had to make a custom filter to block the scripts in order for it to prevent the audio takeover. Maybe adguard does a better job? Someone else suggested just wholesale disabling o
20.
by emctech 28d ago
No, I took the first sentence of my article and then edited the rest of the intro + conclusion to keep it short for HN.
21.
by emctech 28d ago
AE website on mobile is terrible, they basically force you to use the app. I exclusively use the website on my PC
22.
by emctech 28d ago
Thanks for the reads
23.
by emctech 28d ago
Will do! edit - How do i do this? through github issues? https://github.com/uBlockOrigin/uAssets/issues
24.
by emctech 28d ago
So many website break completely with JS disabled and you end up having to enable it half the time anyway.
25.
by emctech 28d ago
The script generates a known waveform, it is passed through the browser's audio implementation and then the script analyses the result after. Based on your devices settings and hardware the output will be different, e.g. a PC with anal
26.
by emctech 28d ago
I had noticed it before but I was browsing AE a lot today and i got fed up with it. What browser and OS are you using?
27.
by emctech 28d ago
The ability to play audio can usually be permission gated with tab muting, however the methods aliexpress use bypass that mechanism completely.
28.
by emctech 28d ago
Yes, I find it concerning too. I particularly dislike that windows was not aware, nor could it stop the audio stream from effecting the hardware. What other side channels like that exist? Perhaps I can be blamed for using windows
29.
AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint(blog.laserphile.com)
1059 points by emctech 28d ago|337 comments
30.
by emctech 28d ago
Recently I ran into a problem with my Bluetooth headphones. They support multipoint bluetooth audio, so they can be connected to my PC and phone at the same time. Opening the Aliexpress webpage causes a silent audio stream keeping the PC&g

More ›