Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by Exploiting Branch Predictor Race Conditions
Intel mitigates the BHI & BTI, but incompletely
Side-Channel
FlushTime: Towards Mitigating Flush-based Cache Attacks via Collaborating Flush Instructions and Timers on ARMv8-A
Depowering the timer to mitigate flush-based cache attacks
SysBumps: Exploiting Speculative Execution in System Calls for Breaking KASLR in macOS for Apple Silicon
Hacking Apple Silicon by macOS. Kinda ironic.
GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers
Apple f**ked up. Is it really worthy to trade security off for such little performance gain?