Your hard drive is giving away your browsing habits and websites can see it
Researchers have discovered a new attack called FROST that lets malicious websites spy on your browsing activity and open apps by tracking your SSD activity through your browser.
FrankLin
A new attack called FROST lets malicious websites spy on your open tabs and apps by tracking your SSD activity.
Bdavid32/Shutterstock
Your browsing habits may not be as private as you think, even with all the right precautions in place. According to Ars Technica, security researchers have uncovered a new attack technique that lets a malicious website figure out which other sites and apps you have open. You do not need to click anything, download anything, or grant any permission; just visiting the page is enough.
How can websites spy on your browsing activity through hard drive?
The technique is called FROST, short for Fingerprinting Remotely using OPFS-based SSD Timing. Every website and app you use generates its own unique pattern of activity on your SSD, the storage drive inside your computer.
FROST exploits a browser feature called the Origin Private File System, or OPFS, which quietly lets websites store files on your local drive without asking permission first.
FROST: Fingerprinting Remotely using OPFS-based SSD Timing
The attacker’s page creates a large file on your drive and then listens to the tiny speed fluctuations that happen when your SSD is busy handling other tasks. Those fluctuations are fed into an AI model that has been trained to recognize the telltale patterns of specific websites and apps.
According to the research paper, the technique correctly identified which websites a person had visited with about 89% accuracy, and which apps were running with about 96% accuracy, when tested on an Apple M2 Mac.
The attack also works across different browsers simultaneously, meaning visiting the attacker’s page in Chrome can still expose what you are doing in Safari.
The browsers won’t fix this, but you can protect yourself
Campaign Creators / Unsplash
FROST has not been spotted in the wild yet, which is reassuring. It also only works while the offending tab is open, so closing it immediately stops the attack.
Google, Apple, and Mozilla were all informed, but none have committed to a fix. Your best defense right now is keeping an eye on your available disk space. A sudden, unexplained drop in storage is a red flag worth investigating immediately.
Browser-level fixes have been proposed, including capping how much disk space OPFS can claim, but given the browser makers’ responses, those changes are not coming any time soon.
Manisha Priyadarshini is a tech and entertainment writer with over nine years of editorial experience.
iOS 27 leak shows off Siri’s minimalist redesign and new tricks within a dedicated app
Bloomberg's iOS 27 leak reveals the most ambitious Siri redesign in the assistant's history.
Apple’s biggest Siri overhaul in nearly 15 years is taking shape ahead of WWDC 2026 on June 8, 2026, and the first detailed look at what the revamped assistant might look like comes from Bloomberg.
These aren’t official images or promotional materials, but renders based on the information that the outlet has collected from its sources. Furthermore, Apple often tests multiple designs and versions before releasing the final version of a product, so it could still differ.
Qualcomm’s Snapdragon C chip eyes dirt-cheap laptops as MacBook Neo redraws budget lines
A $300 laptop that actually works? Qualcomm thinks it has the answer.
Budget laptops have always been a compromise. You either get a machine that struggles to keep up with your browser tabs or one that dies before lunch. And almost all of them feature a cheap plastic body. Qualcomm wants to change that with its new Snapdragon C Platform, a chip built specifically for entry-level laptops starting at $300.
Qualcomm says that the Snapdragon C is designed for students, families, and small businesses that need a reliable, everyday machine without breaking the bank. Devices powered by this chip will handle web browsing, video streaming, productivity apps, and video calls without a hitch.
YouTube’s Home feed is becoming whatever you ask it to be
A new prompt-based chip lets signed-in U.S. users build refreshing feeds around moods, interests, or curiosities
YouTube is adding a new discovery chip to its Home page that turns a typed request into a personalized stream of videos.
The feature, called "Your custom feed," gives people a more direct way to break out of the usual recommendation mix. A viewer can ask for something outside their normal watch patterns, or narrow the experience around a particular moment, such as short guided meditations after work.
