Top Websites Using Audio Fingerprinting to Secretly Track Web Users
Despite browsing incognito, blocking advertisements, or hiding your tracks, some websites monitor and track your every move online using a new web-tracking technique called Audio Fingerprinting.
This new fingerprinting technique can be utilized by technology and marketing companies to deliver targeted advertisements as well as by law enforcement to unmask VPN or Anonymous users, without even decrypting the traffic.
Researchers at Princeton University have conducted a massive privacy survey and discovered that Google, through its multiple domains, is tracking users on nearly 80 percent of all Top 1 Million Domains using the variety of tracking and identification techniques.
This new fingerprinting technique can be utilized by technology and marketing companies to deliver targeted advertisements as well as by law enforcement to unmask VPN or Anonymous users, without even decrypting the traffic.
Researchers at Princeton University have conducted a massive privacy survey and discovered that Google, through its multiple domains, is tracking users on nearly 80 percent of all Top 1 Million Domains using the variety of tracking and identification techniques.
Out of them, the newest tracking technology unearthed by the researchers is the one based on fingerprinting a machine’s audio stack through the AudioContext API.
"All of the top five third-parties, as well as 12 of the top 20, are Google-owned domains," the researchers note. "In fact, Google, Facebook, and Twitter are the only third-party entities present on more than 10 percent of sites."The AudioContext API is not collecting audio played or recorded on a machine, but rather harvesting the audio signals of the each machine that is then using it to reveal unique browser and device combinations.
The method has nothing to do with the device's microphone, as it relies on the way a signal is processed.
A third-party tracker uses the AudioContext API to send low-frequency sounds to a user's computer and then measures how the computer processes the data, creating a unique fingerprint based on the hardware and software capabilities of the user's computer.
Here's what the researchers explain:
"A script from the company Liverail checks for the existence of an AudioContext and OscillatorNode to add a single bit of information to a broader fingerprint. More sophisticated scripts process an audio signal generated with an OscillatorNode to fingerprint the device. This technique appears conceptually similar to that of canvas fingerprinting. Audio signals processed on different machines or browsers may have slight differences due to hardware or software differences between the machines while the same combination of machine and browser will produce the same output."
Check Your Audio Fingerprint
The audio fingerprinting technique is not widely adopted but joins a number of other approaches that could be used in combination for tracking users as they browse the Internet.
To carry out measurements to track the trackers, the researchers said they used a custom piece of an open-source software called OpenWPM, which loads sites in Chrome, Firefox and Internet Explorer, collecting data on the tracking loaded on each page.
Also Read: Here's How Websites Are Tracking You Online.
Another widely used method to track online users is fingerprinting technique based on the HTML Canvass API and WebRTC local IP discovery.
From last few years, many websites and third-party trackers are utilizing the fingerprinting power ofHTML5 Canvas, which is a HTML element used to dynamically generated an image in your browser’s web page.
