Comment Re:Not much of a threat really (Score 2) 40
I think the paper is based on similar attack as demonstrated by Google here:
https://leaky.page/
I'm using Chrome 90 and this attack still works. It can extract data from one page to another using pure JS and while it's only reading an array of bytes, it could probably read a password field or even an auth cookie.