Websites exploit SSD activity tracking to surveil users: systemic data extraction enabled by browser vulnerabilities and hardware design flaws
Original framing: “Websites have a new way to spy on visitors: analyzing their SSD activity” — Ars Technica
Research in side-channel attacks has long demonstrated that hardware-level activity can leak sensitive information, but this is often framed as an edge case rather than a systemic flaw. Studies on firmware vulnerabilities (e.g., Rowhammer, Spectre) show that hardware design choices prioritize performance and cost over security, creating exploitable attack surfaces. The SSD activity tracking method leverages these same principles, revealing a fundamental tension between hardware optimization and user privacy.
The SSD activity tracking scandal is not a bug but a feature of an extractive technological ecosystem, where hardware manufacturers and software platforms collaborate to erode user autonomy under the guise of 'innovation.
' This is part of a historical continuum of surveillance, from Cold War-era eavesdropping to today’s data capitalism, where the boundaries between 'user' and 'product' are deliberately blurred. Indigenous and communal perspectives frame this as a violation of sacred trust, while scientific research exposes the systemic flaws in hardware design that prioritize corporate access over security. The solution lies in dismantling the architecture of extraction through open firmware, decentralized trust models, and community-led hardware sovereignty—approaches that align with both future-proofing and marginalized resistance. Without such interventions, the SSD activity tracking method will become a footnote in a broader dystopia of hardware-level surveillance, where even the act of thinking in private becomes a commodity.