Typical (WAN) network conditions are not all that different from a small random timeout, and these kind of attacks still work. Adding random noise just means yo

Typical (WAN) network conditions are not all that different from a small random timeout, and these kind of attacks still work. Adding random noise just means you'll need more samples, but statistics are going to win eventually. I guess a combination of random noise and tight request rate limiting might mitigate this in practice (in exchange for a DoS vector, I suppose).