FROST: Your Disk Drive Is The Snitch
protonprivacy.substack.com
Most of the surveillance stories we’ve looked at here lately have involved things you can at least see when you walk past them: cameras at the gate, sensors on the shelf, a label adjusting a price as you move through space.
  • scytale@piefed.zipEnglish
    15·
    3 days ago

    Google said it does not consider browser fingerprinting to be a security vulnerability.

    Apple described the attack as “currently out of scope,” with possible mitigations in the future.

    Mozilla acknowledged the findings but has not implemented any fix.

    Well Firefox should get a fix because the other two don’t give a shit. Hopefully DDG does too.

    • Hakuso@scribe.disroot.orgEnglish
      71·
      3 days ago

      I think it’s more likely Firefox forks will than Chromium forks, we already have some mitigation on Waterfox and Librewolf, despite Mozilla being a complete joke now they do still have some good projects fixing everythng they screw up.

  • SayCyberOnceMore@feddit.ukEnglish
    7·
    3 days ago

    So, it needs time to fill a large chunk of my SSD then use AI to guess what my specific machine is doing after that… when I’ve probably closed the FROST web page…

    Ok, if I’m a “person of interest” that they’re going to spend a lot of time looking at then I’d bear this in mind… for me, you & joe public… it’s not a thing.

  • unitedwithme@lemmy.todayEnglish
    42·
    3 days ago

    Wire, such trash! So, using multiple browsers like Firefox and any fork, technically separate programs, aren’t even safe. So a hardened browser isn’t sage from an untrustworthy one.

    Like the article says:

      • Look into tighter OPFS quotas where possible. The researchers’ own headline suggestion is for browser vendors to clamp the maximum OPFS size, restrict high-resolution timers when OPFS is in use, or require explicit permission. Until that ships, some browsers and policy controls (particularly for managed Chromium environments) let you tighten the ceiling yourself.*
      • Treat browser hardening as a habit, not a one-off. A VPN will not save you from this one, because the leak is happening locally on your machine, not on the wire. Keep your attack surface small, do not leave sessions running indefinitely, do not blindly trust a tab from yesterday.*