Earlier quoted context omitted.
The internet is Statistically consistent, which is all the attack needs.
Even if you added a random up to one second pause, that's still "Statistically consistent", it just requires far more samples to detect millisecond variations.
(delayed, but) whups, my mistake. Read that wrong.