I believe most public cloud providers pin different user VMs to separate physical cores, which defends a lot against these attacks because you aren't sharing a

I believe most public cloud providers pin different user VMs to separate physical cores, which defends a lot against these attacks because you aren't sharing a branch predictor or an L1 cache with other people. And qemu comes with other mitigations: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-upda...