The first time I heard about attacks on crypto that monitored processor power consumption, I was pretty skeptical. It seems crazy to me that it could work. But of course it does.
Same thing with timing attacks, til I learned how to code one for myself.