Websites have a new way to spy on visitors: Analyzing their SSD activity (arstechnica.com)
from cm0002@lemdro.id to cybersecurity@infosec.pub on 28 May 17:13
https://lemdro.id/post/40880906

#cybersecurity

threaded - newest

lurch@sh.itjust.works on 29 May 03:35 next collapse

this is complete bullshit and relies on a well trained AI, but users, websites and browser setups are too different for it to reliably work in the wild.

this is the whole fingerprinting overreaction all over again.

cadmiumsandbox@lemmy.blahaj.zone on 30 May 00:17 collapse

yup, aint no way anyone’s training data on latency of every website and app ever. nor would that be possible bc of just so so many possible variations in the stack of execuation. this attack, if feasible for anything, would only work if the user’s stack is well known already. even then there’s way better ways to attack

Cyber@feddit.uk on 30 May 00:34 collapse

By measuring the manifestations, attackers can decrypt encrypted traffic

How ?

Even the research paper doesn’t appear to mention this (unless I missed something)