Android apps secretly tracking users by listening to inaudible sound hidden in adverts

Researchers say the technique can even be used to de-anonymise Tor users

Aatif Sulleyman
Tuesday 09 May 2017 10:15 BST
Comments
Users should be selective about the apps they download
Users should be selective about the apps they download (Getty)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

An increasing number of Android applications are attempting to track users without their knowledge, according to a new report.

Over recent years, companies have started hiding “beacons”, ultrasonic audio signals inaudible to humans, in their adverts, in order to track devices and learn more about their owners.

Electronic devices equipped with microphones can register these sounds, allowing advertisers to uncover their location and work out what kind of ads their owners watch on TV and which other devices they own.

The technique can even be used to de-anonymise Tor users.

“Throughout our empirical study, we confirm that audio beacons can be embedded in sound, such that mobile devices spot them with high accuracy while humans do not perceive the ultrasonic signals consciously,” reads the report from researchers at Technische Universität Braunschweig in Germany.

They found that, while six apps were known to be using ultrasound cross-device tracking technology in April 2015, this number grew to 39 by December 2015, and has now increased to 234.

The study hasn’t named any specific programs, but says that several have millions of downloads and “are part of reputable companies”, including McDonald’s and Krispy Kreme.

“They embed these beacons in the ultrasonic frequency range between 18 and 20 kHz of audio content and detect them with regular mobile applications using the device’s microphone,” the research adds.

Since consumers need to have the apps open in order for advertisers to use them for tracking purposes, the privacy threat isn’t quite as worrying as it could be.

However, the researchers believe it could grow into a serious issue "in the near future”.

As ever, users should be selective about the apps they download.

If you can’t work out why an app is asking for certain permissions, such as access to your camera or microphone, think twice about installing it.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in