Is that actually the case? I've read a few things that seem to imply they've fixed the timing attcks without breaking the spec, but this was all heresay and unsubstantiated claims.