Web Timing Attacks Made Practical