| ▲ | lxgr an hour ago | |||||||||||||||||||||||||
I wish such shenanigans would simply trigger the little speaker icon most browser display on tabs these days. Given that they don't (at least in my experience), I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content... Now I wonder, does this also allow websites to continue running in the background on mobile browsers? Playing media is one of the very few things that can convince iOS Safari to keep a tab running indefinitely, in my experience. | ||||||||||||||||||||||||||
| ▲ | nubinetwork 42 minutes ago | parent | next [-] | |||||||||||||||||||||||||
It does on my Firefox, I had to close their tab because it also tricks kde into thinking I'm playing audio. | ||||||||||||||||||||||||||
| ▲ | emctech an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||
I wonder if it is something firefox and chrome devs need to look at because if it is accessing the audio device surely it should be notified to the user. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||
| ▲ | pmontra 33 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||
The speaker icon would be handy but I think that it depends from both the good will of Firefox and the installed add ons. Of course if an add on blocks the audio file there is no need to display the speaker icon for that file. To give you the idea of what is going on, this is what uMatrix shows about www.aliexpress.com in my Firefox browser on my laptop. It would be more difficult to copy and paste from uMatrix on my Android phone. It shows a number of sites. Nothing in first party and these that I must fully enable to make the site work (css, image, script, xhr) * aliexpress.com * ase.aliexpress.com * it.aliexpress.com (my country two letters domain) * umdc-global.aliexpress.com * aidcgroup.net * ase.aidcgroup.net * 67372.ase.aidcgroup.net * alibaba-inc.com * epss.alibaba-inc.com * alicdn.com * ae01.alicdn.com * assets.alicdn.com * aliexpress-media.com * ae-pic-a1.aliexpress-media.com * assets.aliexpress-media.com * aliyun.com * acjs.aliyun.com Scary list, right? According to google aidcroup is > Alibaba International IPP Platform > Alibaba International is committed to the protection of intellectual property rights. Right holders and their agents can enforce intellectual property ... Let me add a /s to the last line There are two more sites that I can completely block * googlesyndication.com * pagead2.googlesyndication.com so even Alibaba runs ads on Google. I did not instrument the browser like the author of the post did, so I don't know where the audio comes from. There is nothing listed in the media column of uMatrix. This does not mean that the post is inaccurate. It could be that the browser gets the audio stream from a request in one of the other categories. uBlockOrigin blocks two of other requests. 1. https://g.alicdn.com/code/npm/@ali/gmod-pop-disclosure-code/... and this one that I anonymize 2. https://aplus.aliexpress.com/g.gif?logtype=0&title=WebPush Permission&pre=https://it.aliexpress.com/?gatewayAdapt=glo2ita&scr=1920x1080&_p_url=https://it.aliexpress.com/wp.html&cna=<whatever cna is>&category=&aplus=&$${beacon_mini}$$=&yunid=&=&trid=<trid>&asid=<base64 stuff>$${get_sign}$$&p=1&o=linux&b=firefox153&s=1920x1080&w=gecko&ism=other&cache=<7 letters>&lver=8.15.25&jsver=aplus_std&pver=0.7.12&_pw=0&_ph=0&tag=1&stag=-1&lstag=-1&_slog=0 Probably the audio file is coming from one of the unblocked requests but my Debian laptop does not pair with my Bluetooth earpieces so I can't test it. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||
| ▲ | downrightmike an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||
I wish the browser would classify the fingerprinting and not load the site and show a security risk warning like it does for http sites. Then Advanced > Accept risk to continue. @FireFoxDudes You need to be addressing fingerprinting | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||
| ▲ | ryandrake an hour ago | parent | prev [-] | |||||||||||||||||||||||||
It's insane that browsers just hand over API access to my microphone and/or camera to rando web developers. Yes, I know things like Zoom exist. IMO software like that simply shouldn't be possible on browsers, period. Making the browser into a general purpose system SDK was a mistake--maybe the biggest mistake in personal computing's history. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||
