{
  "id": 9886479,
  "title": "File Change Notification Side Channel: Estimating Keystroke Timing and Browsing Activity on Linux, Android, and Windows",
  "url": "https://urgent.news/2026/09/26/file-change-notification-side-channel-estimating-keystroke-timing-and",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-26T02:18:44.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/anoymask/file-change-notification-side-channel-estimating-keystroke-timing-and-browsing-activity-on-linux-3in7"
  },
  "original_language": "en",
  "account": "Researchers have demonstrated a method to estimate user activities, such as keystrokes, browsing destinations, and WhatsApp media interactions, using file change notifications on Linux, Android, and Windows systems. This side-channel attack is possible without privileged access or explicit permission to access sensitive information. The researchers utilized publicly available code to validate their findings on various operating systems, with the exception of macOS, where the research material was not applicable.",
  "summary": "1. Overview Original Title: File Notification Attacks: Side-Channel Leakage from the File-Notification System on Linux, Android, Windows, and macOS Source: Graz University of Technology (File Notification Attacks Research Team) Publication Date: 2026-09-24 (Public disclosure date by researchers) Updated: None Severity: High Basis for Severity: While local execution is required, unprivileged…",
  "key_points": [
    "Researchers demonstrated estimating user activities via file change notifications.",
    "Method applicable to Linux, Android, and Windows systems.",
    "Attack possible without privileged access or explicit permission."
  ],
  "editors_take": "This side-channel attack method significantly lowers the bar for estimating sensitive user activities, as it requires no special privileges or permissions, putting users of Linux, Android, and Windows systems at risk.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}