I was also there, and that was _one of the things_ that worried Jon Masters (the guy from Red Hat). In general, there seemed (to me) to be a consensus that as

I was also there, and that was _one of the things_ that worried Jon Masters (the guy from Red Hat). In general, there seemed (to me) to be a consensus that as long as you had access to high-resolution timing (like RDTSC), and any form of speculation/prediction (even in in-order pipelines), then you could have exploits. The recording will eventually be up at https://www.youtube.com/playlist?list=PLoROMvodv4rMWw6rRoeSpkiseTHzWj6vu https://www.youtube.com/playlist?list=PLoROMvodv4rMWw6rRoeSp..., but I can't recommend it. Unfortunately, Mr. Masters spent most of the ~75 minutes on introductory material (a fairly common mistake at EE380). The best discussion happened in the additional hour after the official end of the talk (and of the recording). In fact, Pro Tip to people presenting at EE380 (and, for that matter, most "Company X wants to show us Y" meetings that I've attended): Take your slide deck, and delete the first 40% of it.