Here's a timing attack that doesn't need any user interaction: https://ndev.tk/visted/