☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 8 days agoWebsites have a new way to spy on visitors: Analyzing their SSD activityarstechnica.comexternal-linkmessage-square9fedilinkarrow-up124cross-posted to: news@lemmy.linuxuserspace.showtechnology@hexbear.nethackernews@lemmy.bestiver.seprivacy@programming.devprivacy@lemmy.mltechnology@beehaw.orgtechnology@lemmit.onlineprivacy@sopuli.xyz
arrow-up124external-linkWebsites have a new way to spy on visitors: Analyzing their SSD activityarstechnica.com☆ Yσɠƚԋσʂ ☆@lemmy.ml to Security@lemmy.mlEnglish · 8 days agomessage-square9fedilinkcross-posted to: news@lemmy.linuxuserspace.showtechnology@hexbear.nethackernews@lemmy.bestiver.seprivacy@programming.devprivacy@lemmy.mltechnology@beehaw.orgtechnology@lemmit.onlineprivacy@sopuli.xyz
minus-square☂️-@lemmy.mllinkfedilinkarrow-up5·8 days agowhy do webpages have access to my fucking ssd in the first place
minus-square☆ Yσɠƚԋσʂ ☆@lemmy.mlOPlinkfedilinkarrow-up4·8 days agooh not directly, but the code on the page can do a timing attack to see how long it takes to read and write a large file which can be used to fingerprint your ssd
minus-square☂️-@lemmy.mllinkfedilinkarrow-up3·8 days agoyeah that’s what i mean. this shit has to be abstracted away, seriously. complex javascript on webpages is full of holes.
minus-square☆ Yσɠƚԋσʂ ☆@lemmy.mlOPlinkfedilinkarrow-up3·8 days agoTiming attacks are tricky because a lot of the time people don’t even think of them as a vector.
why do webpages have access to my fucking ssd in the first place
oh not directly, but the code on the page can do a timing attack to see how long it takes to read and write a large file which can be used to fingerprint your ssd
yeah that’s what i mean. this shit has to be abstracted away, seriously.
complex javascript on webpages is full of holes.
Timing attacks are tricky because a lot of the time people don’t even think of them as a vector.