Cloudflare updated that post. It previously read: > The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker ne

Cloudflare updated that post. It previously read: > The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server. Now it reads: > Currently the attack can only be executed by an attacker with an ability to execute native code on the affected machine. While there might be a possibility to execute this attack via the browser on the remote machine it hasn’t been yet demonstrated.