GoKawiilAliExpress used silent Web Audio API scripts to fingerprint visitors' devices
Researchers discovered that AliExpress's homepage runs hidden, inaudible audio-processing code tied to Alibaba's security systems, which measures how a device's hardware handles an audio signal to create a unique fingerprint without cookies. The behavior was uncovered by a developer whose Bluetooth headphones failed to switch between devices while an AliExpress tab stayed open, since the silent audio graph kept the system's audio path active even when muted. The same scripts reportedly also collected canvas, WebGL, and hardware configuration data as part of a broader tracking setup.