Websites have a new way to spy on visitors: analyzing their SSD activity
Summary
Researchers have discovered a new method for websites to monitor user activity by analyzing their Solid State Drive (SSD) behavior through JavaScript in the browser. This technique leverages the timing differences in SSD read/write operations to infer user actions, potentially creating a new avenue for invasive tracking.
IFF Assessment
This article describes a novel tracking method that could be used to gather more information about users, posing a privacy risk and a potential threat to defenders.
Defender Context
This development highlights a new and potentially difficult-to-detect method for user tracking, which could be exploited for profiling or malicious purposes. Defenders should be aware of the possibility of browser-based side-channel attacks that infer user activity through hardware interaction, and consider ways to detect or mitigate such behaviors.