New FROST Technique Allows Websites to Track Users via SSD Activity

Security researchers have discovered a new way for websites to fingerprint visitors by analyzing their SSD performance characteristics using JavaScript.

A newly discovered tracking method named FROST (fingerprinting remotely using OPFS-based SSD timing) enables websites to quietly monitor users' hardware. By measuring minute variations in solid-state drive (SSD) performance, sites can create unique hardware profiles.

This technique utilizes simple JavaScript running directly in the browser, bypassing traditional privacy safeguards. It raises significant new concerns for web users attempting to block persistent online tracking and device fingerprinting.

Detailed Coverage & Deep Dives

Ars Technica: Websites Have a New Way to Spy on Visitorshttps://arstechnica.com/security/2026/05/websites-have-a-new-way-to-spy-on-visitors-analyzing-their-ssd-activity/

FROST Research Paperhttps://hannesweissteiner.com/publications/frost/