Skip to main content
    Your Browser Can Now Be Used to Spy on Which Apps You Open
    Cybersecurity
    Important
    4 min read

    Your Browser Can Now Be Used to Spy on Which Apps You Open

    A new tracking method uses JavaScript to monitor your computer activity through your hard drive's timing. No permissions needed, just an open browser tab.

    Source

    GetCyberRight Intelligence

    Original headline: SSD Timing Attack Tracks Apps via JavaScript

    Plain-English summary by GetCyberRight. Read the full report at the source above.

    Published Tuesday, June 9, 20264 min read
    Share:

    Your Browser Can Now Be Used to Spy on Which Apps You Open

    Researchers have discovered a way for websites to track which applications you open and which sites you visit, using nothing more than JavaScript code running in your browser. Unlike traditional tracking methods that ask for permission or require you to install something, this technique works silently in the background through a simple webpage.

    The Details

    Here's how this works in plain English. When you open an app or visit a website, your computer's solid-state drive (SSD) has to read data. That reading process takes a measurable amount of time. A malicious website can use JavaScript to repeatedly request files and measure how long your SSD takes to respond.

    When your drive is busy loading your email program or a specific website, it responds just slightly slower to these timing tests. By measuring thousands of these tiny delays, the malicious site can figure out what you're doing on your computer. It's like listening to someone's footsteps in another room and guessing what they're doing based on the rhythm and speed.

    The concerning part is that this happens entirely through normal browser functions. The attacker doesn't need you to click anything, download anything, or grant any permissions. A single tab left open in the background can monitor your activity for as long as it stays open. The technique works across different browsers and operating systems.

    Who Is Affected

    Anyone who browses the internet is potentially vulnerable to this tracking method. It affects users on Windows, Mac, and Linux computers that use SSDs, which includes most computers made in the last five years.

    Families should pay special attention if children use computers for schoolwork or entertainment. A tracking script on a compromised website could monitor which educational apps they open, which games they play, or which websites they visit. This creates a privacy risk that most parents wouldn't know to look for.

    What You Should Do Right Now

    1. Close browser tabs you're not actively using. Don't leave dozens of tabs open in the background. If you want to save something for later, use bookmarks instead.

    Stay one step ahead of scammers

    Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.

  1. Check which tabs are running scripts. In Chrome, Firefox, and Edge, look at your Task Manager (Shift+Esc in Chrome, or through browser menus). Close tabs using excessive resources.

  2. Use browser extensions that block JavaScript on untrusted sites. Tools like uBlock Origin or NoScript can prevent scripts from running on sites you don't explicitly trust.

  3. Keep sensitive activities in separate browser profiles. Create one profile for banking and important accounts, and another for general browsing. This limits what any single tracking script can observe.

  4. Restart your browser daily. This closes all tabs and stops any background tracking scripts. Make it part of your routine, like locking your doors at night.

  5. The Bigger Picture

    This discovery represents a growing trend in privacy threats. Attackers are finding creative ways to extract information without triggering security warnings or permission requests. Side-channel attacks like this one exploit normal computer functions that weren't designed with privacy in mind. As our devices become more powerful and complex, these attack surfaces multiply. Staying informed about emerging threats helps families make better decisions about their digital safety.

    How GetCyberRight Can Help

    Our Cyber Threat Radar tool tracks exactly these kinds of emerging privacy threats as they develop. It monitors new browser-based tracking techniques, side-channel attacks, and other sophisticated methods that might not make mainstream news but directly affect your family's privacy. Think of it as an early warning system that helps you stay ahead of threats before they become widespread problems.

    Protect Yourself

    Use our Cyber Threat Radar to check if you're affected and take action.

    Found this useful?

    Share it with someone who could use a heads-up.

    Share:

    Curated from trusted cybersecurity sources by GetCyberRight

    Source: GetCyberRight Intelligence

    Discussion

    0

    Sign in to join the discussion.

    Stay ahead of cyber threats

    Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.