AliExpress Hijacks Multipoint Bluetooth Headphones With Hidden Web Audio Fingerprinting

On August 20, 2026, the laserphile blog described a simple, ugly problem. Load the AliExpress homepage in Firefox or Chrome and multipoint Bluetooth headphones stop playing audio from your phone. Close that tab and the phone comes back instantly.

There is no product video. There is no music player. Muting the tab does not help. Muting Firefox does not help. Muting Windows does not help. The page looks idle, and your headphones still treat the PC as busy.

That is not broken hardware. That is a shopping site occupying your audio path without asking.

How multipoint headphones get stolen

Multipoint Bluetooth is supposed to be convenient. The headphones stay connected to a PC and a phone at the same time. The computer takes priority when it is actually playing something. The phone waits, then takes over when the PC goes quiet.

The headphones do not care whether you can hear a sound. They care whether the computer has an active audio path. If a webpage keeps that path open, the PC wins. Your phone gets cut off. Music, podcasts, even a call waiting on the phone can die while you stare at a silent storefront.

No media, two hidden audio engines

The laserphile writeup checked the obvious places first:

  • No <audio> or <video> elements
  • No calls to play media
  • No Media Session showing playback
  • No media requests hiding in a frame

Nothing useful showed up. The trouble also did not start the instant the page loaded. It kicked in after the AliExpress homepage sat idle for several seconds.

So the author stopped looking for a player and started watching the Web Audio API. He wrapped the browser AudioContext constructor and watched what the page created. Two hidden audio contexts appeared. Both went into the running state. Both connected nodes to AudioContext.destination, which is the live speaker path.

Still no audible sound. Still no media elements. The PC was “playing audio” only because AliExpress built a silent audio graph and left it running.

Why a store page needs your sound card

The laserphile post puts a name on it: Web Audio fingerprinting. Sites use the Web Audio API to help identify a browser even when cookies are locked down. You do not press play. You do not get a volume slider. Your machine just gets measured.

I do not need a white paper to call this what it is. A shopping page is holding your headphones and poking your hardware so it can tell you apart from the next person. Regular folks should not have to reverse engineer a product page just to keep a podcast on their own gear.

That is the part that pisses me off. The webpage looks idle. Your headphones look broken. The store is the one holding the switch.

What this means if you use multipoint Bluetooth

If phone audio randomly dies while a shopping tab is open, do not assume the headphones are junk. Check the browser first.

  • Close the AliExpress tab. In the original report, that restored phone audio right away.
  • Muting the tab, the browser, or Windows will not fix it. Silent Web Audio is not the same thing as a muted video.
  • This showed up in Firefox and Chrome. Other browsers were not tested in the writeup.
  • The grab can wait a few idle seconds, so a page that seemed fine at first can still steal the headphones.
  • Any site that leaves a running AudioContext wired to the destination can pull the same stunt.

If you live on multipoint headphones the way a lot of us do, treat leftover shopping tabs like an open mic. They can hold the line even when you hear nothing.

What actually works

You should not need a debugger to browse a store. Until browsers treat silent Web Audio with the same suspicion they give autoplay video, the practical moves are blunt.

  • Shut the AliExpress tab when you are done looking.
  • Keep shopping sites in a separate browser window or profile if work audio and phone audio share the same headphones.
  • If a site seizes your headphones with no visible media, that is a signal, not a coincidence.
  • Privacy blockers may cut some fingerprinting scripts, but the only fix proven in this case was closing the page.

Your headphones are not confused. They are doing what the computer told them. AliExpress just never bothered to tell you it was talking.

Primary Source: https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.