21
Websites have a new way to spy on visitors: Analyzing their SSD activity
(arstechnica.com)
Confidentiality Integrity Availability
oh not directly, but the code on the page can do a timing attack to see how long it takes to read and write a large file which can be used to fingerprint your ssd
yeah that's what i mean. this shit has to be abstracted away, seriously.
complex javascript on webpages is full of holes.
Timing attacks are tricky because a lot of the time people don't even think of them as a vector.