You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
opfs privacy
About this tag
The OPFS privacy tag covers discussions about the Origin Private File System in web browsers and its implications for user privacy. A key topic is the FROST side-channel attack, which exploits JavaScript OPFS timing to infer other open applications and websites by measuring SSD behavior. This research, disclosed by Graz University of Technology, highlights that browser privacy boundaries now extend beyond traditional concerns like cookies and permissions to include hardware-level storage timing. The tag explores how OPFS, while designed for secure local storage, can be leveraged in side-channel attacks, raising important questions about browser security and privacy in modern computing environments.
Researchers at Graz University of Technology have disclosed FROST, a browser-based side-channel technique that uses JavaScript and the Origin Private File System to infer other open websites and applications by measuring SSD timing behavior, with public reporting surfacing the work in late May...