Here is a white paper of another exploit without user interaction, which is still working on most browsers. It's called "Pixel-perfect timing attack". https://

Here is a white paper of another exploit without user interaction, which is still working on most browsers. It's called "Pixel-perfect timing attack". https://media.blackhat.com/us-13/US-13-Stone-Pixel-Perfect-Timing-Attacks-with-HTML5-WP.pdf https://media.blackhat.com/us-13/US-13-Stone-Pixel-Perfect-T... The related bug on the Chrome tracker was closed with a "won't fix".