May 31, 2026
Privacy at Risk
Browser OPFS flaw lets FROST ID websites with 89% accuracy
Security researchers at Graz University of Technology have detailed a new browser-based side-channel attack that can reveal which websites and applications a user has open by measuring SSD access latency through JavaScript. The technique, named FROST (Fingerprinting Remotely using OPFS-based SSD Timing), achieved about 89% accuracy for identifying visited websites and roughly 96% accuracy for recognizing running applications on an M2 Mac Mini test system. The attack requires only that a victim load a malicious web page and reportedly functions across different browsers. How FROST operates FR…






