[Jefff]

It was used to great effect on the Xbox 360 until later vulnerabilities rendered it obsolete: http://beta.ivc.no/wiki/index.php/Xbox_360_Timing_Attack

It was literally just a careless use of memcmp to check an HMAC that allowed for it to work.