Websites are using this FROST-y new technique to spy on users by snooping on their SSD activity
- Researchers at Graz University of Technology unveiled FROST, a browser side‑channel attack
- The method can reveal visited websites and opened desktop apps, but requires large file creation
- Limitations exist, yet the study highlights how modern browser features expand the attack surface for surveillance
Security researchers have come up with a new way of spying on internet users, and they’re calling it FROST. Recently, more than half a dozen researchers from the Graz University of Technology (Austria) published a new report called “FROST: Fingerprinting Remotely using OPFS-based SSD Timing” in which they claim that there is a way to spy on user activities directly through the browser.
This is a remote side-channel technique that exploits a standard browser feature called the Origin Private File System (OPFS). Generally, a side-channel attack is a way of stealing secrets by measuring physical side effects, such as how long an action takes, how much...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
