A developer who previously built Onionservatory, a tool to audit Onion Service security configurations, has now released a companion tool called Onionspector. This new tool flips the perspective, showing users exactly what data points—from HTTP headers to browser fingerprinting signals like screen size, fonts, and Canvas/WebGL output—a website can collect about them when they connect, even over Tor.
0ut3r.space
· 2026-09-06
Researcher Matthew Callaghan discovered AliExpress running hidden scripts that generate silent, inaudible sound waves through the WebAudio API to create a unique fingerprint of each visitor's browser. He noticed the tracking only because it interfered with his multipoint Bluetooth headphones, cutting off phone audio whenever the AliExpress tab was open. The scripts muted the sound with a zero gain setting so users would never notice, but the browser still processed and transmitted the audio data back to the site.
arstechnica.com
· 2026-08-24