Websites can spy on user activity by analyzing SSD behavior
Overview
Researchers have discovered a new technique called FROST, which allows websites to track user activity by analyzing the behavior of a user's Solid-State Drive (SSD). This method can infer information about the files and applications stored on the SSD, which is unexpected for most users. The implications of this technique raise significant privacy concerns, as it adds another layer to the existing methods websites use to monitor user behavior, like browser fingerprinting and tracking scripts. Users may not be aware that their storage devices can be exploited in this way, highlighting the need for more robust privacy protections. As this method gains attention, it emphasizes the ongoing challenges of online privacy and security.
Key Takeaways
- Affected Systems: Websites utilizing tracking techniques, users with SSDs, browsers supporting OPFS.
- Action Required: Users should consider using privacy-focused browsers and tools that limit tracking, as well as regularly clearing browser data.
- Timeline: Newly disclosed
Original Article Summary
Websites have spent years collecting information about visitors through browser fingerprinting, tracking scripts, and other techniques designed to identify devices and monitor behavior. Researchers have demonstrated another method that relies on something most users would never expect a website to observe: activity on their SSD (Solid-State Drive), the storage device where applications and files are stored. Dubbed FROST, short for Fingerprinting Remotely using OPFS-based SSD Timing, the technique allows a website to infer information about … More → The post Websites can spy on user activity by analyzing SSD behavior appeared first on Help Net Security.
Impact
Websites utilizing tracking techniques, users with SSDs, browsers supporting OPFS.
Exploitation Status
No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.
Timeline
Newly disclosed
Remediation
Users should consider using privacy-focused browsers and tools that limit tracking, as well as regularly clearing browser data.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.