#fingerprinting — Public Fediverse posts

> I cannot see what AliExpress does with the resulting data after it reaches their servers. It may be used as a persistent device identifier, but it could also be one input into a fraud or bot-detection score.

**AliExpress webpage keeping multipoint Bluetooth headphones active with WebAudio fingerprinting**

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html

#alibaba #aliexpress #fingerprinting #privacy

Researcher finds AliExpress runs hidden WebAudio fingerprinting scripts that silently seize your PC's Bluetooth audio path.

#AliExpress #Fingerprinting #WebAudio #BrowserPrivacy #Cybersecurity #uBlockOrigin

https://securityonline.info/aliexpress-audio-fingerprinting/?utm_source=mastodon&utm_medium=jetpack_social

For some time now I’ve been noticing that #AliExpress activates the microphone indicator on Mac OS while browsing the site. I’ve checked Safari’s settings and the page has no permission to access the microphone. It was driving me crazy.
Turns out AE is (as I suspected) playing sneaky games: https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
So, to begin with, out with the iOS app.
And I’ll see if blocking the mentioned scripts helps. Sneaky assholes! 😠

#fingerprinting #webaudio #gdpr #privacy #cybersecurity #bluetooth

TL;DR

The AliExpress homepage silently creates two running WebAudio graphs from heavily obfuscated Alibaba security scripts. The graphs generate and analyse a waveform as part of a much larger browser fingerprint, then connect through a zero-gain node to the system audio destination preventing the user from hearing anything.

On my setup, this appears to keep the PC's Bluetooth audio path active and prevents multipoint headphones from switching back to a phone. Muting the tab does not fix it because there is no conventional media element to mute.

Blocking `collina.js` and `fireyejs.js` with the two uBlock Origin rules above prevented the hidden audio contexts from being created and means I can happily listen to my music without being interrupted while browsing Aliexpress.

#aliexpress #tracking #audio #fingerprinting

AliExpress webpage keeping multipoint Bluetooth headphones active with WebAudio fingerprinting

In Firefox, I use the official uBlock Origin extension by Raymond Hill. To block the scripts open the uBlock dashboard, select My filters, and add:

```js
! AliExpress AWSC fingerprinting scripts

||assets.aliexpress-media.com/g/AWSC/uab/*/collina.js$script,domain=aliexpress.com

||assets.aliexpress-media.com/g/AWSC/fireyejs/*/fireyejs.js$script,domain=aliexpress.com
```

Click Apply changes, close any existing AliExpress tabs, and open the site again. Existing tabs need to be closed because blocking a script does not shut down an audio context that it has already created.

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html

#aliexpress #tracking #audio #fingerprinting

This should not be legal, right?

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html

#fingerprinting #browser #bluetooth #privacy #AliExpress

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html

Comments: https://news.ycombinator.com/item?id=49372583

#HackerNews #AliExpress #WebAudio #Bluetooth #fingerprinting #multipoint #security

Modern browsers don't really need the cookie anymore.

This page set none. It asked for zero permissions. You have clicked nothing.

And yet.

#web #privacy #browser #fingerprinting

https://kuber.studio/cookie/

Jak odpowiedzi AI będą znakowane w sposób niewidzialny dla ludzi?

Niebawem wszystkie znane narzędzia AI zaczną dodawać w niewidoczne dla ludzi znaki do generowanych przez siebie odpowiedzi (zarówno tekstu, obrazów jak i kodu). Te tzw. znaki wodne (ang. “watermark”) to nie będą niewidzialne znaki Unicode, czy “mdashe” porozstawiane w odpowiednich miejscach ;) Anthropic, twórca Claude już opisał, jak zamierza to robić — i dlaczego musi to robić.
Claude zostawi w odpowiedziach ślady, ujawniające że z niego skorzystałeś na 2 sposoby
Anthropic potwierdził, że modele Claude wprowadzone w UE po 2 sierpnia 2026r. albo później będą obsługiwać “maszynowo odczytywalne oznaczenia”. Niewidoczny watermark trafi do całego tekstu odpowiedzi zarówno z aplikacji Claude Code/Cowork, jak również API i będzie też dodawany jeśli z modeli Anthropica ktoś będzie korzystał od innego dostawcy. Starsze modele są dopiero dostosowywane do tego wymogu, więc nie jest prawdą, że dziś “każda dodpowiedź Claude’a już jest znakowany”.
Powyższa ilustracja została syntetycznie wygenerowana z wykorzystaniem sieci neuronowej podczas procesu inferencji modelu generatywnego typu text-to-image
Anthropic wdraża dwa mechanizmy.

Generowany tekst otrzymuje na poziomie modelu znak, który przechodzi przez kopiuj-wklej i może przetrwać część edycji.
Generowana grafika (PNG, JPG i SVG) dostaje natomiast podpisane metadane pochodzenia C2PA. Podpis informuje, że plik {prze,s}tworzył Claude, ale może zniknąć po konwersji, ponownym zapisaniu lub wykonaniu zrzutu ekranu.

Nie szukaj niewidzialnych znaków — to na nic!
Anthropic nie ujawnił szczegółów technicznego mechanizmu watermarku. Nie ma więc podstaw, by twierdzić, że są to “niewidoczne znaki Unicode” usuwalne prostym parserem. [...]

#AI #Anthropic #ChatGPT #Claude #Fingerprinting #Gemini #Google #OpenAI #Watermarking

https://niebezpiecznik.pl/post/jak-odpowiedzi-ai-beda-znakowane-w-sposob-niewidzialny-dla-ludzi/

ICYMI: Brave cuts three GPU fingerprinting signals in version 1.93 by default: WebGL vendor and renderer strings collapse to one value for every user, hitting hash-based trackers. Brave says WebGPU extension randomization is planned next. https://ppc.land/brave-cuts-three-gpu-fingerprinting-signals-in-version-1-93-by-default/ #BraveBrowser #Privacy #Encryption #WebGL #Fingerprinting

#EEF met à disposition un outil pour mesurer le degré de vulnérabilité de votre #navigateur #web au #fingerprinting :

https://coveryourtracks.eff.org/

Sous #Librewolf avec #ublock, #JSShelter et #PrivacyBadger, on obtient un résultat pas trop mauvais, même si (1) l'outil ne couvre pas tout et (2) « Your browser has a nearly-unique fingerprint ».

Après, plus il y aura de monde sous #linux et moins mon empreinte sera unique 😄

I Didn’t Set a Cookie, by (not on Mastodon or Bluesky):

https://kuber.studio/cookie/?ref=frontenddogma.com

#cookies #fingerprinting #privacy

@brave

What's also interesting their localhost open ports scan is inconsistent on #Brave.

Sometimes it shows "none" (dev tools show a CORS error then) and sometimes it finds 3 (127.0.0.1:5900 [qemu], 0.0.0.0:5000 [octoprint, aka a webserver], 0.0.0.0:631 [cups, also a webserver])

On Google Chrome it always finds 2 my octoprint and cups. The 5900 shows up with an "invalid http response" error in the dev tools there.

Interesting.

#fingerprinting

#Development #Comparisons
Fingerprinting protection · How Brave, Firefox, and Safari protect users from fingerprinting https://ilo.im/16f6b5

_____
#Business #Privacy #Fingerprinting #Brave #Firefox #Safari #Browser #WebDev #Frontend

Prøv det !

En praktisk demo af, hvordan du kan identificeres - og spores på tværs af internettet - uden at en enkelt cookie nogensinde bliver indstillet i din browser

#fingerprinting #privacy
https://kuber.studio/cookie/

Das Fingerprinting ist schon krass. Bzw. auf dem Handy dachte ich, naja ok - so überraschend sind die Details nicht. Aber dass es auf dem PC implizit laufendes MySQL erkennt, überrascht mich nun doch.

"Your browser can't read localhost responses, but it can *time* the connection. Port 3306 accepted a TCP connection in a way a closed port never would (296ms vs the instant refusal of a dead port)."

https://kuber.studio/cookie/

#cookies #fingerprinting #browser

This is useful and can be checked with a quick visit to your browser settings!

Browser Fingerprinting can track your Internet activity - no cookies needed!

https://lifehacker.com/tech/how-to-stop-browser-fingerprinting #Internet #Trackers #FingerPrinting #Cookies #InternetTracking #Safety #Visibility #Privacy #Browsers #Security

Was #Browser in Standardeinstellung zulassen oder blocken in einer großen Übersicht.

Aufschlussreich in diesen datenhungrigen Zeiten …

#Datensparsamkeit #Fingerprinting #Tracking

https://privacytests.org

#Google hat Werbetreibende darüber informiert, dass sie ab dem 3. August 2026 IP-Adressen von Nutzenden aus EU, UK und der Schweiz für die Anzeigenmessung und -personalisierung verwenden wird.
Diese Daten werden schon länger gesammelt. Neu ist die gezielte Nutzung zur Identifikation von Endgeräten für Werbezwecke.

Höchste Zeit, um
- personalisierte Werbung bei euch abzustellen
- Chrome zu ersetzen -> Alternativen mit mehr Schutzmöglichkeiten
- Tracking überall abzulehnen

#Fingerprinting

@evacide

Eva, I'm not sure whether I believe that's a dedicaed privacy mining funnel.

After attempting to jump through all of the hoops with the crazy KYC-like requirements, including the reliance of IIRC, https://gov.com logon and not until the very end of the verification that I was who I said I was it went and required me to provide a DID (that's a phone number, for those of you who do not already know) that it liked.

I'm sorry (NOT) but there was way more than enough divulged, including my existing Gov.com creds, to believe that California was privacy mining for the sake of tracking their subjugated chattel.

Thanks, great idea and thank you also for your public service, but I don't even know if I"m going to bother to go look again - I FELT REALLY VIOLATED

#tallship #privacy #privacy_mining #fingerprinting #industrial_surveillance

⛵

.

Taken, by @sinceyouarrived.world:

https://sinceyouarrived.world/taken?ref=frontenddogma.com

#privacy #fingerprinting

Архитектура обмана. Как технически устроены фермы накрутки отзывов в 2026 году?

Подделка рейтингов окончательно перешла с бирж фриланса на автоматизированные конвейеры. Сегодня отзывы генерируют локальные LLM, а публикуют скрипты через антидетект-браузеры и резидентные прокси. Такая ботоферма самостоятельно формирует цифровой след: собирает cookies на сторонних сайтах, закладывает лексические ошибки в текст и подменяет отпечатки железа, чтобы система приняла профиль за живого человека с реальным провайдером. В ответ маркетплейсы и геосервисы перестали анализировать исключительно сам текст и переключились на графовый анализ. Антифрод отслеживает микродвижения мыши, скорость скроллинга и сетевые пересечения аккаунтов. Математически идеальный рейтинг 5.0 или шаблонные тайминги публикации становятся для алгоритма прямой командой к действию. Площадка не просто удаляет сомнительные комментарии, а отправляет карточку товара в теневой бан, срезая органические показы в поиске.

https://habr.com/ru/articles/1049936/

#антифрод #накрутка_отзывов #ботофермы #фейковые_отзывы #LLM #антидетект_браузеры #графовый_анализ #fingerprinting #резидентные_прокси #поведенческий_анализ

Wie viel verrät dein iPhone, ohne dass du es merkst? Die Open-Source-App Loupe zeigt es dir - direkt und ungefiltert. Sie liest dieselben Werte, die jede andere App ebenfalls abrufen kann: Geräteinfos, Zeitzone, Bildschirmgröße, Akkuladung und vieles mehr. Einzeln harmlos, zusammen ein Fingerabdruck, der dich sitzungsübergreifend identifizierbar macht. 👇

https://apps.apple.com/us/app/loupe-what-apps-can-see/id6766152470

https://github.com/mysk-research/loupe

#iOS #Fingerprinting #Datenschutz #OpenSource #Tracking

https://www.wired.com/story/websites-can-now-spy-on-you-through-your-hard-drive/

Sites have a new way to spy on their visitors: by measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows sites to monitor other sites a visitor is viewing and what apps are open on their devices.

#Privacy #Tech #FROST #Security #Fingerprinting

Cloudflare Turnstile requiring fingerprintable WebGL (hacktivis.me)

https://hacktivis.me/articles/cloudflare-turnstile-webgl-fingerprinting

#privacy #fingerprinting #webgl #cloudflare

@rolle The extension I had issues with was #CanvasFingerprintDefender, which shouldn't cause any issues unless #Turnstile specifically is using #Canvas #fingerprinting attacks, and my issue is more with the advanced fingerprinting than the breakage itself. You are of course free to use it on your instance, which I'm not on, and this was just intended as a friendly #privacy tip, in case of interest.

https://chromewebstore.google.com/detail/canvas-fingerprint-defend/lanfdkkpgfjfdikkncbnojekcppdebfp