Speculating about speculation: on the (lack of) security guarantees of Spectre-V1 mitigations

Spectre and Meltdown opened the Pandora box of a new class of speculative execution attacks that defeat standard memory protection mechanisms. These attacks are not theoretical, they pose a real and immediate security threat, and have been reportedly exploited by cybercriminals. A few presentations from ISCA 2018 Panel, Paul Kocher @ Stanford, Jon Masters from … Continue reading Speculating about speculation: on the (lack of) security guarantees of Spectre-V1 mitigations