Reading privileged memory with a side-channel

We have discovered that CPU data cache timing can be abused to efficiently leak information out of mis-speculated execution, leading to (at worst) arbitrary virtual memory read vulnerabilities across local security boundaries in various contexts. Variants of this issue are known to affect many modern processors, including certain processors by Intel, AMD and ARM. For a few Intel and AMD CPU models

[kazuhooku]

今回の脆弱性（特権メモリをユーザランドから読む方法）の解説。キャッシュ以外にBTBのタイミングも使ってる？

[bk-zen]

Spectre と Meltdown の件についての詳しい解説

[rna]

「Intelのプロセッサチップに根本的な設計上の欠陥が発覚」の件。AMDとARMもあかんらしい。

[tanakh]

今回のCPU騒動のGoogleのレポート(´･_･`)

[todesking]

Project Zero: Reading privileged memory with a side-channel

[yosida95]

"when running with normal user privileges under a modern Linux kernel with a distro-standard config, can perform arbitrary reads in a 4GiB range [3] in kernel virtual memory"