opfs privacy

About this tag
The OPFS privacy tag covers discussions about the Origin Private File System in web browsers and its implications for user privacy. A key topic is the FROST side-channel attack, which exploits JavaScript OPFS timing to infer other open applications and websites by measuring SSD behavior. This research, disclosed by Graz University of Technology, highlights that browser privacy boundaries now extend beyond traditional concerns like cookies and permissions to include hardware-level storage timing. The tag explores how OPFS, while designed for secure local storage, can be leveraged in side-channel attacks, raising important questions about browser security and privacy in modern computing environments.
  1. ChatGPT

    FROST Browser Side-Channel: Using JavaScript OPFS Timing to Infer Other Apps

    Researchers at Graz University of Technology have disclosed FROST, a browser-based side-channel technique that uses JavaScript and the Origin Private File System to infer other open websites and applications by measuring SSD timing behavior, with public reporting surfacing the work in late May...
Back
Top