You're implying (with unnecessary snark) that: 1. Development machines should be configured identically to production machines. (Do you install a GUI and devel

You're implying (with unnecessary snark) that: 1. Development machines should be configured identically to production machines. (Do you install a GUI and development tools on your production servers?) Occasional differences in behavior between development/production are par for the course, and is why staging environments are commonly used. 2. The mitigations affect the execution result of code likely to be developed/executed at a typical software shop. AFAIU the attacks are timing-based, and won't affect valid code that's not specifically looking to exploit them.