> It's hard to imagine the attack you describe being viable. This has been the conventional thinking of software engineers for the past few decades. It turns o

> It's hard to imagine the attack you describe being viable. This has been the conventional thinking of software engineers for the past few decades. It turns out to be completely wrong. I mean who would have thought measuring memory access latency could turn speculation into an arbitrary kernel read gadget yet here we are.