AI Summary

A malicious website can infer which other sites a user visits and which applications they open by measuring the timing of the visitor’s solid‑state drive. The technique, dubbed FROST, operates solely with JavaScript and does not require native code, browser extensions, or any permission prompts. The attacker simply needs the user to load the page and keep the tab open, allowing the script to monitor SSD contention in the background.

AI summaries can be wrong sometimes—always verify important details using the source article.