Indeed, the #Spectre and #Meltdown attacks revealed early January can be exploited in browsers - since these attacks rely on precise timing, reducing the precision of performance.now() was quickly identified as a way to reduce the risks of exploitation