How Spook.js, the first practical Spectre-based attack, works.