Websites have a new way to spy on visitors: analyzing their SSD activity

3 hours ago

A new method called FROST uses side-channel attacks to spy on visitors by measuring SSD interactions, enabling tracking of open websites and apps without user interaction.
The technique exploits a contention side channel by measuring timing of I/O operations, which reveals data from other browser tabs and apps on the device.
FROST runs exclusively in the browser using JavaScript and OPFS, requiring no user interaction other than visiting the attack site, highlighting increased browser vulnerabilities.

Hasty Briefsbeta