Timing attacks from a user's point of view