FROST Attack Lets Websites Profile Open Apps and Sites via SSD Timing
Researchers demonstrate FROST, a browser‑only side‑channel that leverages the Origin Private File System API to measure SSD access latency. By analyzing timing spikes, a malicious site can infer visited websites with ~89% accuracy and running applications with ~96% accuracy, all without native code or user permissions.