Malware and vulnerabilities are the stuff of nightmares for any security-conscious internet user. If you add, privacy invasion into the mix, it gets worse. I mean: a website spying on you using activities of your SSD can sound like a script from your favorite Sci-fi movie. However, it's reality.
If you feel that you are targeted you think you could be in the future, go through the article. It covers how to get it done on your iPhone and Android devices.
The following should get you started:
Generally speaking, these features add extra protection, sometimes by turning off or limiting some regular features. It’s a tradeoff
No security measure is perfect, and it’s a constant effort to keep security flaws at bay. But that doesn’t mean these features are not worth using. On the contrary; these features have been proven effective.
Among the things that I can never think would be possible while browsing on the web, this is going to be among the top 10. While reading, it reminds me of https[://]browserspy[.]dk
From the article:
The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows sites to monitor other sites a visitor is viewing and what apps are open on their devices.
The technique, laid out in a research paper, exploits a side channel, a form of leak resulting from physical manifestations such as electromagnetic emanations, data caches, or the time required to complete a task. By measuring the manifestations, attackers can decrypt encrypted traffic and infer other confidential data.
It can be funny when you read the title. However, it wouldn't be funny if you end up being a victim.
From the article:
The addition was a prompt injection, a form of AI attack that exploits an LLM’s inability to distinguish between legitimate user prompts and those from unauthorized, potentially malicious third parties. AI coding agents that were vulnerable would then delete work product produced by the testing app.
The reception to the discovery has been chilly. One discussion participant called the move “childish,” while another one questioned its legality in some jurisdictions.
Credits
Cover photo by Debby Hudson on Unsplash.
That's it for this week, and I'll see you next time.
SOCIAL SHARE CARD GENERATOR