New timing attack doesn't need application bugs to work
http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?RSS&newsid=4344