New side-channel attack tracks browsing via SSD activity

🔑 Enhanced Key Takeaways

•The attack, dubbed FROST (Fingerprinting Remotely using OPFS-based SSD Timing), was developed by researchers at Graz University of Technology in Austria.
•FROST exploits the Origin Private File System (OPFS) API, a browser feature that allows websites to create and store large files on a user's local disk without requiring explicit permissions.
•The technique demonstrated high accuracy on a test Mac, correctly identifying visited websites with approximately 89% accuracy and running applications with roughly 96% accuracy.
•The attack works across different browsers (e.g., a malicious page in Chrome can monitor activity in Safari) because the contention occurs at the shared physical storage hardware level.
•Browser vendors, including Google, Apple, and Mozilla, were notified of the findings; however, Google reportedly does not classify fingerprinting as a security vulnerability, and Apple deemed the attack 'currently out of scope,' suggesting immediate browser-level fixes are unlikely.

🛠️ Technical Deep Dive

The attack initiates by a malicious website creating a large file (up to 60% of total disk space, potentially over 150GB on a 256GB drive) within its Origin Private File System (OPFS) sandbox.
To bypass the operating system's page cache, this OPFS file must be larger than the system's available RAM, forcing continuous random 4KB reads to directly access the physical SSD.
When other applications or browser tabs perform disk I/O, they compete for SSD access, causing measurable latency spikes in the attacker's ongoing read operations.
To achieve high-resolution timing measurements, the attack configures Cross-Origin Opener Policy (COOP) and Cross-Origin Embedder Policy (COEP) HTTP headers, which unlock nanosecond-level timers (e.g., performance.now()) in the browser, bypassing default timer-fuzzing protections.
The collected timing patterns, representing I/O signatures, are then fed into a pre-trained convolutional neural network (CNN) to classify and identify specific websites or applications running on the victim's system.
Researchers also demonstrated a covert channel using FROST, achieving data exfiltration throughputs of 661.63 bit/s on Linux and 891.77 bit/s on macOS.
The full fingerprinting attack was primarily tested on an M2 Mac Mini with 8GB of RAM and a 256GB SSD, and its effectiveness requires the OPFS file to reside on the same physical SSD as the monitored activity.

🔮 Future ImplicationsAI analysis grounded in cited sources

Browser privacy models will require re-evaluation to incorporate hardware-level side-channel threats.

Existing browser anti-fingerprinting mechanisms are ineffective against this hardware-based attack, necessitating a fundamental shift in how privacy threats are modeled.

Browser vendors will face a significant dilemma between user privacy and web application performance.

Restricting the precision of storage API timing to mitigate FROST could degrade the performance of legitimate web applications that rely on such measurements.

Hardware manufacturers may introduce SSDs with built-in timing obfuscation as a privacy countermeasure.

The emergence of this attack could spur the development of new hardware features designed to randomize or obscure SSD timing signatures, creating a new market for privacy-enhanced storage.

⏳ Timeline

1990s

Discovery of Differential Power Analysis and early timing attacks on cryptographic algorithms.

2017

Meltdown and Spectre CPU vulnerabilities highlight cache-based side-channel attacks.

2026-05-28

FROST (Fingerprinting Remotely using OPFS-based SSD Timing) attack, developed by Graz University of Technology, is publicly disclosed.

New side-channel attack tracks browsing via SSD activity

⚡ 30-Second TL;DR

Key Points

🧠 Deep Insight

🔑 Enhanced Key Takeaways

🛠️ Technical Deep Dive

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline

📎 Sources (11)

👉Related Updates

Dongshan Precision Faces Security Challenges

First atmosphere detected on habitable-zone exoplanet

Samsung Secures $200B Broadcom AI Infrastructure Deal

How AMD's 2006 ATI Acquisition Built Today's AI Empire