Source: Ars Technica
Researchers have discovered that sites can infer what files and programs you're accessing by measuring storage latency—a side channel that bypasses traditional privacy protections like VPNs and incognito mode. Different storage operations create measurable timing patterns, giving websites a direct window into your device's internal behavior rather than just your network traffic. The finding expands the attack surface for tracking beyond cookies and fingerprinting, forcing browser makers and security researchers to reconsider which system behaviors should be accessible to web pages at all.