Essentially all microarchtectural state is fodder for side channel exploits. Static branch prediction like "predict taken if negative branch offset" doesn't le

Essentially all microarchtectural state is fodder for side channel exploits. Static branch prediction like "predict taken if negative branch offset" doesn't leak anything, but just about any dynamically updated tables will (almost tautologically) contain statistical information about what was executed recently.