Hacker News new | ask | show | jobs
by pfp 1610 days ago
Why haven't browsers added built-in protections against this (or have they)?

Exposing this timing data to arbitrary JS code via the DOM was a horrible oversight in the first place. I doubt any websites apart from interactive games actually need to time keystrokes. For those that do, an opt-in permission (like the camera/mic ones) would work.