Great Scott! Timing Attack Demo for the Everyday Webdev (simplethread.com)

a complex often unconsidered security issue well described in a well written article.