Websites Spy on Visitors by Analyzing Their SSD Activity, Researchers Warn
New tracking method uses solid-state drive performance patterns to identify users across different browsing sessions and websites.
Security researchers have discovered a concerning new method that allows websites to spy on visitors by analyzing the activity patterns of their solid-state drives (SSDs). The technique represents a novel form of digital fingerprinting that could potentially track users across different browsing sessions and websites, even when they attempt to maintain privacy through traditional methods.
The discovery highlights how modern web technology continues to evolve in ways that can compromise user privacy. Unlike traditional tracking methods that rely on cookies or browser fingerprinting, this SSD-based approach exploits the physical characteristics and performance patterns of storage devices to create unique identifiers for individual computers.
Researchers found that websites can gather information about SSD performance, including read and write speeds, access patterns, and timing characteristics, through subtle variations in how web pages load and respond. These patterns can be analyzed to create a distinctive "signature" for each device, allowing tracking even when users clear their cookies, use incognito mode, or employ other privacy measures.
The technique works because SSDs exhibit unique performance characteristics based on factors such as their age, manufacturer, capacity, and current usage patterns. By carefully measuring how long certain operations take to complete, malicious websites can build a profile that remains relatively consistent across browsing sessions, potentially enabling long-term tracking of user activity.
The discovery adds to growing concerns about the increasingly sophisticated methods being developed to track internet users. Privacy advocates worry that such techniques could be used to circumvent user consent and privacy controls, as they operate below the level of traditional browser security measures. The research underscores the ongoing cat-and-mouse game between privacy protection efforts and new tracking technologies, suggesting that users and browser developers will need to consider hardware-level privacy protections in addition to software-based solutions.
