The discussion on the cost of the attack needs an addendum. The lattice sieving part would be free for an an attacker with a big enough botnet or enough cloud computing stolen credentials.

Maybe it could even be practical to run it on browser in parallel to video streaming on a free video site...