Loading feed…
Lobsters0 Hot0 comments8 min read
AliExpress keeps multipoint Bluetooth headphones active with WebAudio fingerprinting
A developer investigating why AliExpress's homepage silently blocked their Bluetooth multipoint headphones from switching to their phone traced the issue to two hidden WebAudio contexts created by obfuscated Alibaba anti-fraud scripts (collina.js and fireyejs.js). These scripts build a sawtooth oscillator through an analyser node into a zero-gain node connected to the audio destination, which triggers real audio processing invisible to the user, no media elements, no audible sound, and immune to tab or system mute. Because the graph actively occupies the system audio path, it kept the PC's Bluetooth connection alive and blocked the phone's audio. Further inspection revealed the same scripts also measure canvas, WebGL, hardware specs, WebRTC, mouse/touch events, and automation indicators, forming a broad device fingerprint sent back to Alibaba's telemetry servers. The write-up includes uBlock Origin filter rules to block the specific scripts, restoring normal audio behavior on the site.
Source: https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
