AliExpress Hid a Fingerprint Inside Silent Audio
Hello, dear TEA-mates! Here is what you need to know today.
1. 🔊 AliExpress Hid a Fingerprint Inside Silent Audio
Opening the AliExpress homepage interrupted Bluetooth multipoint audio from a phone in one researcher's Firefox and Chrome tests, even though the page had no audio or video elements, media playback calls, or active Media Session. Instrumentation revealed two Web Audio `AudioContext` objects connected to the system audio destination. Stack traces led to Alibaba browser-security scripts that created sawtooth oscillators, analysers, script processors, and zero-gain outputs. The scripts also measured signals including canvas, WebGL, screen size, device memory, plugins, WebRTC, performance, interactions, motion, and automation, then serialized and transmitted the results. The client code does not establish how long the server keeps those results or whether Alibaba links them across properties. Blocking the two script families stopped the hidden audio contexts in the author's test. (Read More)
🫖 TEA For Thought: "I bet pretty much all kinds of apps based in China do this. The issue is not only the privacy violation. It also tracks you, profiles you, and potentially hacks you whenever needed. Once you open the door, there is no turning back."
2. 💧 No, Data Centers Cannot Cool Themselves With Untreated Urine
Liquid Death and Garage Beer recruited Jason Kelce for a campaign joking that people should donate urine to cool AI data centers. Experts told TechCrunch that untreated urine would foul cooling systems because it contains salts, urea, bacteria, and organic matter. Treated wastewater, however, is already used for industrial cooling through processes including membrane bioreactors, reverse osmosis, and ultraviolet light. In 2025, data centers in Loudoun County used about 200 million gallons of recycled water per day, or 43% of their supply, while 260 million gallons came from potable sources. Meta plans to invest at least $270 million in nearby wastewater infrastructure, and a proposed federal measure would offer a 30% tax credit for recycled-water infrastructure. (Read More)
🫖 TEA For Thought: "This is the most disturbing, disgusting, line-crossing ad I have seen in a while. AI data centers may not be good for the environment, but this lowers the bar for civilization far too much. This is just too low."
3. 📰 Google Gives Publishers a Preferred Sources Button
Google released an embeddable Preferred Sources button that lets readers mark a publication for more prominent treatment in Search, Discover, and Google News. Preferred Sources had already expanded from Top Stories to AI Mode and AI Overviews in May. Google said users have selected more than 345,000 unique sources and that earlier studies found people were twice as likely to click a preferred source when it appeared. The company also plans natural-language controls for Discover feeds and customizable audio briefings in the Google News Android app. (Read More)
🫖 TEA For Thought: "Google still controls traffic by deciding what people see or do not see. No one can see the underlying ranking or know which website is truly preferred. Whatever Google says it is, that is what it has to be."
4. ☁️ Chinese AI Firms Reportedly Access Restricted Nvidia Compute Remotely
Chinese AI firms can reportedly use restricted Nvidia computing power remotely through data centers in Southeast Asia without owning the physical chips. A White House official accused Moonshot AI of using GB300 compute through a Thailand facility after the release of Kimi K3, while ByteDance, Alibaba, and Tencent have reportedly accessed Nvidia capacity through Thailand, Malaysia, Japan, or other Asian locations. Current U.S. export controls focus on physical chips rather than remote access. The Remote Access Security Act passed the House in January but has not cleared the Senate. It would give the government authority to regulate remote cloud access, although a separate enforceable rule would still be required. Meanwhile, JLL estimates global data-center capacity could roughly double to 200 GW by 2030. (Read More)
🫖 TEA For Thought: "This is just patching holes. It is nearly impossible to stop anything now."
5. 💳 Stripe Calls January 1 the Beginning of the Singularity
Stripe told investors that January 1 marked the "beginning of the singularity," its term for a major inflection point in long-term trends. The private payments company said first-half revenue rose 41% year over year, free cash flow rose 43%, and the share of revenue from AI and crypto companies more than doubled. Stripe said 88% of the Forbes AI 50, including OpenAI and Anthropic, build on its platform. It also confirmed that it is acquiring OpenRouter, while Axios reported a price above $8 billion, mostly in stock. Stripe did not disclose the price. The company said remaining private lets it fund acquisitions and long-term investments without increasing its share count, which it says is lower than three years ago. (Read More)
🫖 TEA For Thought: "Another benefit of Stripe being private is that it does not have to publicize its books. Everything stays private, so the company can say whatever it would like."
🛠️ Skill of the Day
The Parallel Work Map: turns a project into a small dependency map that shows what can start together, what must wait, who owns each part, and what to do next.
You are my project coordinator. Turn the project below into a small parallel work map that is useful to both nontechnical teammates and developers.
Project:
[PASTE THE PROJECT, PLAN, OR TASK LIST HERE]
Return:
1. Outcome: one sentence describing what finished means.
2. Work map: a table with columns for task, owner, can start now, parallel with, depends on, and proof of completion.
3. Critical path: the shortest chain of tasks that controls the finish date.
4. Blockers: missing decisions, access, information, or approvals.
5. Next three actions: the exact first moves, in priority order, with an owner for each.
Rules:
- Keep the map small and group closely related work.
- Do not invent owners, deadlines, dependencies, or evidence. Mark missing details as "not provided."
- Put independent work in parallel.
- Separate required work from optional improvements.
- Explain technical dependencies in plain language.
- Flag any task that could create an irreversible change, external message, publication, payment, or deletion.Paste in a launch plan, home project, event, software feature, or team task list to see what can move at the same time.
TEAHEE Moment
Stay sharp, stay informed. See you Monday.
If you enjoyed this TEA, follow along on social for more: