Your hard drive is giving away your browsing habits and websites can see it

Researchers disclosed FROST, a browser-based privacy attack that uses Origin Private File System and SSD timing to infer which sites and apps are open.

On an Apple M2 Mac, it reportedly identified visited websites with about 89% accuracy and running apps with about 96% accuracy.

The attack can work across multiple browsers and may expose open tabs or apps just by keeping a webpage open, with no clicks or downloads.

Browser vendors have not yet committed to a fix, leaving a new cross-browser tracking risk unresolved.