AliExpress has been caught using inaudible sounds to profile users and disrupt Bluetooth headphones, according to a report by hardware hacker Matthew Callaghan. The technique, known as ultrasonic fingerprinting, exploits frequencies beyond human hearing to collect data about your device and behavior without your consent.
What Happened: The Accidental Discovery
Callaghan, a software engineer and hardware hacker, noticed something odd while using multipoint Bluetooth headphones connected to both his PC and phone. Whenever he opened AliExpress in Firefox or Chrome, the audio from his phone would stop playing through the headphones and only return after closing the tab.
Even muting the tab, the browser, or Windows didn't fix the issue, and there was no visible video or audio content on the page. Intrigued, Callaghan investigated further and discovered that AliExpress was emitting ultrasonic sounds—frequencies above the range of human hearing—that were interfering with his Bluetooth connection.
How Ultrasonic Fingerprinting Works
Ultrasonic fingerprinting uses high-frequency sounds to transmit data between devices or to detect nearby speakers and microphones. In this case, AliExpress appears to be using these sounds to gather information about the user's environment and device setup.
This technique can be used for cross-device tracking, fraud detection, or distinguishing between human and automated traffic. However, it also raises significant privacy concerns because it operates silently and without user awareness.
Why Bluetooth Headphones Are Affected
Bluetooth headphones with multipoint connectivity are particularly vulnerable because they maintain active connections to multiple devices simultaneously. The ultrasonic signals can cause the headphones to switch audio sources or drop connections, leading to the disruptions Callaghan experienced.
Why This Matters for Your Privacy
The use of ultrasonic sounds for profiling is part of a broader trend of invasive online tracking. While companies often claim such measures are for security or personalization, they often collect far more data than necessary.
This incident highlights how little control users have over the signals their devices emit and receive. It also underscores the importance of transparency and consent in data collection practices.
- Silent tracking: Ultrasonic sounds are inaudible, so users are unaware of the data being collected.
- Device interference: The technique can disrupt Bluetooth audio, causing frustration and potential hardware issues.
- Lack of consent: Users are not informed about or asked to consent to this profiling.
- Regulatory gaps: Existing privacy laws may not adequately cover ultrasonic fingerprinting.
- Cross-device tracking: The method can link a user's activity across multiple devices, eroding anonymity.
What AliExpress Says—and What It Doesn't
AliExpress has not publicly commented on the findings. The company's privacy policy likely mentions data collection for security and analytics, but it does not specifically disclose the use of ultrasonic sounds.
This lack of transparency is concerning, especially given the potential for misuse. Without clear disclosure, users cannot make informed decisions about their privacy.
How to Protect Yourself
While it's difficult to completely avoid ultrasonic tracking, there are steps you can take to mitigate the risks. Using browsers with strict privacy settings, such as Firefox with enhanced tracking protection, can help. Disabling JavaScript or using extensions that block known tracking scripts may also reduce exposure. The longer history behind the story is traced in AliExpress Uses Inaudible Sounds to Profile Users and Hijack Bluetooth Audio.
For Bluetooth headphones, consider using models that don't support multipoint connectivity or turning off Bluetooth when not in use. Additionally, staying informed about privacy issues and advocating for stronger regulations can drive change. The background to this story is set out in AliExpress Phone Deals Today: Xiaomi, Samsung, Realme. A related thread runs through AliExpress Mobile Phone Deals: Xiaomi, POCO, Realme. Earlier coverage in Technology: latest articles shows how the argument developed.
| Tracking Method | How It Works | User Awareness | Potential Impact |
|---|---|---|---|
| Ultrasonic fingerprinting | Emits inaudible high-frequency sounds to detect devices and gather data | None | Cross-device tracking, audio disruption |
| Cookies | Stores small data files in the browser | Often disclosed via banners | Behavioral tracking, ad targeting |
| Browser fingerprinting | Collects browser and device attributes | None | Identification without cookies |
What to Watch Next
This discovery may prompt regulators to examine ultrasonic tracking more closely. Privacy advocates are likely to call for clearer guidelines and enforcement. Meanwhile, users should remain vigilant and demand transparency from the services they use. A closer look at the same subject appears in LG Smart TV Data Collection: What the New Study Reveals. Anyone following the wider picture can start with miDGT App Data Sharing Scandal: Privacy Alert for Users. The same theme surfaces in Meta's New Camera-Free Smart Glasses: What They Do and Why It Matters, which takes a different angle.
As tracking techniques evolve, the cat-and-mouse game between trackers and privacy tools will continue. Staying informed is your best defense. Context on how this played out before sits in Huawei FreeBuds Neo Review: Best Budget Earbuds Around 100 Euros. A companion piece, Nilait Acustiq Bluetooth Speakers: Soundbar Alternative Deal, approaches the same subject from another angle.
FAQ
What is ultrasonic fingerprinting?
Ultrasonic fingerprinting is a tracking technique that uses inaudible high-frequency sounds to collect data about a user's device and environment. It can be used for cross-device tracking and fraud detection but raises privacy concerns.
Why did AliExpress's ultrasonic sounds affect Bluetooth headphones?
Bluetooth headphones with multipoint connectivity can be disrupted by ultrasonic signals, which may cause them to switch audio sources or drop connections. This is what Matthew Callaghan experienced.
Is ultrasonic tracking legal?
The legality of ultrasonic tracking is unclear and varies by jurisdiction. Existing privacy laws may not specifically address it, and companies often rely on vague disclosures. Regulators may need to update rules to cover this technique.
How can I prevent ultrasonic tracking?
You can reduce exposure by using privacy-focused browsers, blocking tracking scripts, and avoiding multipoint Bluetooth headphones. However, completely avoiding ultrasonic tracking is difficult without broader regulatory action.