51
submitted 1 week ago by git@hexbear.net to c/technology@hexbear.net
you are viewing a single comment's thread
view the rest of the comments
[-] invalidusernamelol@hexbear.net 14 points 1 week ago

This seems a bit of a pain to actually use for tracking. A 1GB file allocation and neural network processing of all the transaction data to maybe find out that someone has Google Docs open?

[-] sovietknuckles@hexbear.net 21 points 1 week ago

The whole thing is client-side JavaScript. The attacker won't care about resources used, in this case, because the victim foots the bill

[-] invalidusernamelol@hexbear.net 11 points 1 week ago

Does mean it'll be pretty easy to detect at least.

[-] EveningCicada@hexbear.net 13 points 1 week ago

Though if I were using something like google maps I wouldn't notice an extra 1GB.

[-] invalidusernamelol@hexbear.net 14 points 1 week ago* (last edited 1 week ago)

I just read the paper and it isn't 1GB, it's system ram. So it has to create a file in your OPFS that's closer to 32GB.

It can also only fingerprint the top 100 sites right now.

It will also noticably slow things down since it's clearing your page cache 1000 times/sec which means you're running almost entirely in swap/disk space.

Firefox is also the only one that limits OPFS size (10GB) so they need to create multiple files if you have more than 10GB or ram.

[-] EveningCicada@hexbear.net 8 points 1 week ago

So it's basically a non-issue unless it becomes far more efficient?

[-] invalidusernamelol@hexbear.net 9 points 1 week ago

Unless I'm reading it wrong? Seems like it's more of a "we can get your hardware to behave a certain way, even when sandboxed" thing than a "this is a very serious security vulnerability" thing?

I don't see how it could become more efficient since the attack vector is basically just filling your ram and forcing your OS to clear the page cache.

this post was submitted on 01 Jun 2026
51 points (96.4% liked)

technology

24387 readers
374 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

founded 5 years ago
MODERATORS