Top
Best
New

Posted by emctech 13 hours ago

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint(blog.laserphile.com)
824 points | 274 commentspage 5
__MatrixMan__ 6 hours ago|
Bluetooth is such a mess. You know what didn't have this problem? Cables.
aembleton 2 hours ago|
Also, non-multipoint Bluetooth.
ankushdograuk 10 hours ago||
This is the reason I use adguard everywhere
emctech 10 hours ago|
I use ublock origin and by default it wasn't blocking, i had to make a custom filter to block the scripts in order for it to prevent the audio takeover. Maybe adguard does a better job? Someone else suggested just wholesale disabling of JS but it is the nuclear option.
nottorp 12 hours ago||
Besides the privacy implications, they are also wasting our fucking batteries on this crap...
lapcat 11 hours ago||
Cloudflare challenges also use Web Audio, by the way.
emctech 8 hours ago|
Does it hold an audio stream open constantly or just briefly during the challenge? On AE it never stops
lapcat 8 hours ago||
Just briefly during the challenge.
theyeenzbeanz 6 hours ago||
Can we just limit web APIs to cookies and the likes as before? I don’t like how JavaScript has access to so many devices on the host. It’s a security and privacy nightmare.
kinnth 8 hours ago||
This sounds like a GDPR issue no? Couldn't they be taken to the EU!
kenniskrag 8 hours ago||
Yes. In this case probably not fineeprinting is not allowed because not strictly necessary (cookie law) and therefore needs consent from user.
edelbitter 6 hours ago||
Going batshit with browser APIs is also a formidable GDPR defense. e.g. try browsing the privacy-related forms for Google (https://myaccount.google.com) on Firefox :D (entire browser freezes up every other second for me, because of some extremely important work Google needs to run on my CPU to let me scroll down on a static site containing roughly 30 words)
echelon_musk 12 hours ago||
OP please submit the filter to an upstream uBlock filter list.
emctech 12 hours ago|
Will do! edit - How do i do this? through github issues? https://github.com/uBlockOrigin/uAssets/issues
emctech 9 hours ago|||
They said they aren't interested
quinncom 4 hours ago|||
You can also submit to the EasyPrivacy list or one of the AdGuard lists.
fnwbr 8 hours ago|||
chimed in... thank you for the great documentation!
emctech 6 hours ago||
I am glad people like the write up and it is fostering a conversation! It is such a happenstance that i looked into this.
docmars 7 hours ago||
Sounds like we're gonna need browsers to pop an audio playback permission, as annoying as that seems. Abusive sites just can't help themselves.
downrightmike 7 hours ago||
There is no legit reason to be doing this.
shevy-java 8 hours ago|
We need to find a solution to browsers sniffing on people. This here refers to AliExpress, but which browsers are typically spying on people like that in the first place? That's the real primary problem.
More comments...