Websites Can Now Peek at Your SSD to See What Else You're Up To
There's reportedly a new way for websites to spy on visitors: by monitoring how their computers' SSDs behave. The technique is called FROST, short for "fingerprinting remotely using OPFS‑based SSD timing," and it runs through JavaScript on a web page.
A malicious website can create a large file in the browser's private storage. It can then repeatedly read from this file to check for small changes in the time it takes to access it. These timing changes occur because other programs and browser tabs are also using the SSD, creating competition for drive access, per Ars Technica.
By tracking these timing patterns and feeding them into a trained convolutional neural network, the attacker can determine which other websites and apps are open on the device. This works in different web browsers and can recognize common applications based on their input and output patterns. FROST does not read actual...
Copyright of this story solely belongs to extremetech.com. To see the full text click HERE
