A New Browser Attack Exploits SSD Timing to Spy Across Tabs

Researchers at Graz University of Technology have demonstrated FROST, a side-channel attack that monitors visitor activity across browser tabs and identifies applications running on the computer. The attack measures timing patterns in how an SSD handles disk requests—detectable through JavaScript—and uses machine learning to fingerprint concurrent activity. It exploits the browser's Origin Private File System API to create contention.