In security-sensitive situations, performance can actually be a bug rather than a feature. This presentation covers timing attacks on the web, and demonstrates how modern performance-related web APIs can sometimes have a negative security impact.

Mathias Bynens — Front-End Performance: The Dark Side from Fronteers on Vimeo.