The attacker needs some way to execute code on your machine. The code doesn't need any special permissions, although attacks are more difficult (but not impossi

The attacker needs some way to execute code on your machine. The code doesn't need any special permissions, although attacks are more difficult (but not impossible) if it doesn't have access to high resolution timing information. You can be a target by visiting a webpage with JavaScript enabled.