This is a pretty ace side channel attack, using the relative time complexities of blinding different colours to calculate the value of pixels in an iframe by timing how long the rendering takes.