Researchers say they can spy on your browsing by measuring SSD activity through a browser API — claim FROST attack requires no permissions or user interaction to identify which apps and websites you're using
www.tomshardware.com
The technique correctly identified visited websites with roughly 89% accuracy and running applications with roughly 96% accuracy on a test Mac
  • KatherinaReichelt@feddit.orgEnglish
    3·
    7 hours ago

    Yeah - stuff like this really shows that computing went in the wrong direction. You shouldn’t install every crap software on your computer. You shouldn’t install every crappy app. Browsers have too much access and are therefore a security risk by themselves. So we are left without any sensible way to run small programs like the one you are using to flash some firmware or to configure your mouse or whatever. Install it on your computer and it will spy on you. Flash the firmware from your browser and you are totally fucked, because your internet-facing thingy can flash a firmware