AliExpress used inaudible sound to track users
The Silent Score: How AliExpress Turned Browser Audio into Personal Tracking Data
In the high-speed world of e-commerce, where transactions happen in a blink, a startling privacy breach has been uncovered involving one of the giants: AliExpress. The massive shopping platform has been caught employing hidden, silent audio processes within visitor browsers, silently generating unique device tracking profiles without obtaining any user consent.
This seemingly innocuous digital trick is a stark reminder of the fine line between convenience and surveillance in the modern web experience. The technology wasn’t designed for commerce; it was quietly repurposed for data collection, hiding within the very stream of sound that we expect to be a private sensory input.
The revelation did not come from a major regulatory body but from an unlikely source: a dedicated software developer named Matt Callaghan. Callaghan’s investigation was triggered by a seemingly mundane issue involving his personal technology.
The initial catalyst was a frustrating technical glitch: his multipoint Bluetooth headphones inexplicably stopped playing music. While troubleshooting the issue, Callaghan delved deeper, uncovering the hidden mechanisms at play within the software he was using to interact with the web.
What he discovered was far more complex than a simple connection error. Embedded within the background audio operations were these insidious tracking processes, meticulously designed to build detailed profiles of users engaging with the site, regardless of whether they intended to share that data.
The core of the issue lies in the invisible data being gathered. By monitoring the subtle auditory data flowing through the browser, the system was creating unique fingerprints for each visitor—a digital score that provided AliExpress with invaluable, non-obvious tracking information.
This incident highlights a growing tension between user experience and privacy. As e-commerce continues to evolve, it is essential that the data collection methods used by global platforms are transparent, ethical, and fully consensual. The discovery serves as a timely prompt for developers and corporations alike to re-evaluate how they handle the personal information, even the seemingly peripheral, signals generated by our digital interactions.