IT researchers have demonstrated a side-channel attack called "FROST" where browsers can spy on user behavior via SSD access times.