This is really nice research! Simple, effective, and brutal. This reminds me of the research that went into finding issues in the media plugin models. Essentia

This is really nice research! Simple, effective, and brutal. This reminds me of the research that went into finding issues in the media plugin models. Essentially, once the security community discovered that Java and Flash, etc, plugins didn't follow the same rules as the browser at all times - it became a free bug hunting exercise until the media plugin model just died. I expect there are some "side channel" type ways to create high resolution timers in browsers which have removed built in support for them, for instance: WebAssembly? WebGL subroutines? Anyway, congratulations.