Topic

File-change notification APIs

Operating system interfaces that alert applications when files or directories are created, modified or deleted, used by editors, sync clients and antivirus tools.

Current clusters

build2 publishers

Graz researchers use file-change notifications to infer keystroke timing on Linux, plus other leaks on Android and Windows

Graz University researchers showed unprivileged apps can infer keystroke timing and browsing from file-change notifications on Linux, Android and Windows. The fixes shipped so far are partial, and the keystroke and KDE clickjacking flaws are still present.

Publishers:dev.tolwn.net

Reality

Evidence62
Adoption: Insufficient
Hype gap+5
Incentives: Insufficient
Confidence60

security1 publisher

Graz researchers turn OS file-change alerts into a monitor for typing and browsing

Graz University of Technology researchers used OS file-change alerts to identify sites another Windows user visited with 97.8% accuracy in Firefox. Every attack needs code already running on the device; on Android, an app that asks for no permissions is enough.

Publishers:securityweek.com

Reality

Evidence55
Adoption: Insufficient
Hype gap+15
Incentives: Insufficient
Confidence50