21
Websites have a new way to spy on visitors: Analyzing their SSD activity
(arstechnica.com)
Confidentiality Integrity Availability
why do webpages have access to my fucking ssd in the first place
oh not directly, but the code on the page can do a timing attack to see how long it takes to read and write a large file which can be used to fingerprint your ssd
yeah that's what i mean. this shit has to be abstracted away, seriously.
complex javascript on webpages is full of holes.
Timing attacks are tricky because a lot of the time people don't even think of them as a vector.