A simple JavaScript script can now tamper with your SSD without you even noticing. This innovative technique analyzes read latency to deduce which websites and applications you’ve opened. In the blink of an eye, your tabs and activity are exposed, without any warning or permission.
This scenario, called FROST by its authors, exploits the Origin Private File System, a local space reserved for browser files. No installation or special vulnerability is required! It’s chilling.
A subtle face of digital tracking that undermines our very notion of confinement between tabs. The supposed protection of our browsing is actually a deception, a bit like thinking you’re locking a door when the window is wide open.
How can a minimalist script reveal all your activity on an SSD?
By default, the browser offers a local system, OPFS, for saving files without requesting permission. A handy tool, right? Austrian researchers from the FROST project created a JavaScript script that stores a large file in this space and then performs random reads in a loop.
Each time the SSD is accessed by other programs, it slightly slows down these reads. This slowdown is minimal, measurable in microseconds only. But a good algorithm misses nothing: by analyzing these latency variations, it deduces which application each access belongs to.
The entire system operates in real time, providing a “fingerprint” of the SSD that reveals your open tabs, even in other browsers. This marks a new era of digital tracking, more insidious and harder to detect.
A silent attack, no warning, no software installed
FROST requires no user interaction. No installation, no annoying pop-up windows. A script hidden in a web page is all it takes to launch this monitoring. You think you’re browsing peacefully, but behind the scenes, your SSD is being tracked.
This method leaves no typical traces of intrusion. No suspicious files are left on the machine, nor is there a resource-intensive process to detect. Its execution is invisible, like measuring the length of a field to centimeter accuracy with a giant leap.
Impacts and limitations of this new type of SSD-based espionage
Until now, tracking techniques like fingerprinting have focused primarily on device recognition. FROST goes further: it’s active monitoring of interactions.
In practical terms, this means that the tab separation in your browser, designed to protect you, is completely rendered useless. Your activities, even in other tabs, can be monitored and deduced.
So far, this attack has been successfully tested on macOS equipped with M.2 chips and on Linux. However, Windows, with its huge market share, has not yet been studied. If systems considered more secure fall, it’s difficult to predict Windows’ robustness in this context.
These threats force us to rethink browser and system security
This discovery forces us to rethink how local storage is protected. Browsers don’t warn you when a site uses OPFS in this way. It’s like unknowingly lending your house keys to a stranger.
Developers must find countermeasures to limit this kind of data collection. Browsers should be able to detect and report suspicious behavior. Otherwise, you’re sailing on an ocean where invisible nets track your every move.
A set of recommendations to limit this type of leakage via SSD
- Securing and restricting access to the Origin Private File System in browsers
- Better compartmentalize processes so that SSD latencies provide no usable clues
- Monitor and limit frequent read/write activity in local web spaces
- Use protection and extension tools to strengthen digital privacy
- Keeping your systems up-to-date against the latest discovered vulnerabilities
To delve deeper, this detailed article presents the phenomenon and the technical implications of FROST. A minimalist script reveals your open tabs in the blink of an eye.There’s no smoke without fire, and in this case, the smoke is clearly visible.
Another recent alert highlights a vast espionage operation that has siphoned data from millions of users, affecting Chrome, Edge and Firefox. This massive hack and its consequences should not be taken lightly.
What is the Origin Private File System (OPFS)?
OPFS is a web interface that allows a website to store files locally on your SSD without requesting explicit permissions. This is useful for speeding up operations, but it also leaves the system vulnerable to attacks like FROST.
How does this script measure SSD latency?
The script continuously creates random reads on a large file stored locally. When another program accesses the SSD, the read times fluctuate very slightly, indicating detectable concurrent activity.
Does FROST work on all systems?
Currently being tested on macOS with M2 chips and Linux, the attack has not yet been validated on Windows. However, its success on supposedly robust operating systems suggests a rapid adaptation to other platforms.
How can you avoid being spied on using this type of technique?
Limit your use of unsecured browsers, use privacy extensions, and above all, keep your browsers and systems up to date. Finally, avoid keeping too many tabs open unnecessarily—an old tip that still holds true!
Is tab partitioning still effective?
This method clearly demonstrates that browser segmentation is not foolproof. Your SSD can still betray your activity even if your tabs are isolated. Security measures must evolve to address this new vulnerability.
Source: www.clubic.com