Researchers say they can spy on your browsing by measuring SSD activity through a browser API — claim FROST attack requires no permissions or user interaction to identify which apps and websites you're using
www.tomshardware.com
The technique correctly identified visited websites with roughly 89% accuracy and running applications with roughly 96% accuracy on a test Mac
  • turdas@suppo.fiEnglish
    2·
    4 hours ago

    You also have to provide access to your computer so the attacker can produce labeled training data for the neural network that performs the pattern matching for the actual fingerprinting.

    Because that’s what they did in the paper: they got the data and performed the attack on the same machine. There’s no evidence presented in the paper that this identification could be generalised to arbitrary machines and configurations without prior access.

    So yes, this is a complete nothingburger.