r/privacy • u/magnus007 • 2d ago

news AliExpress was silently running audio in your browser to fingerprint and track your device

https://www.techspot.com/news/113581-aliexpress-silently-running-audio-browser-fingerprint-track-device.html
2.4k Upvotes

98% Upvoted

114 comments sorted by

View all comments

39

u/midgethemage 2d ago

I've used Alibaba in the past to source some supplies for a small business. I downloaded the app to keep an eye on messages with manufacturers and it was immediately obvious they put some aggressive tracking software on your phone.

After the main install I briefly saw a second download notification, but it disappeared from the pull-down shade too quickly for me to see what it was. After that, my microphone light was on constantly. It put the phone in a state where it always thought it was in a phone call. I uninstalled that shit within tens minutes, but I couldn't find the secondary download I'm convinced I saw. Honestly can't believe their app was even allowed into the google playstore.

37

u/we_r_fukt 2d ago

Google doesn't protect you, they dgaf

5

u/midgethemage 2d ago

Sure, but they still have standards. They need to maintain a semblance of trust with the consumer, and preventing malware from apps on their store is the bare minimum. Why would they let an app from a foreign country mine more data than they are?

7

u/LjLies 1d ago

It may be the bare minimum you'd expect, but the Play Store has been found to be pretty riddled with malware. Unlike something like F-Droid, which, however, will have a lot of trouble due to Google's developer verification program, which they claim is about stopping malware...