It's a way deeper problem than untrusted code, as NetSpectre [0] showed. The issue is with untrusted speculative instruction streams which can be influenced by

It's a way deeper problem than untrusted code, as NetSpectre [0] showed. The issue is with untrusted speculative instruction streams which can be influenced by untrusted code and/or untrusted data. NetSpectre was a remote kernel read primitive entirely from malformed network packets, no untrusted code needed, and no data other than network packets coming in over the wire. [0] https://gruss.cc/files/netspectre.pdf https://gruss.cc/files/netspectre.pdf