I just ran out of stuff to say. I started this to complain about the confusion of what it is to exploit the Spectre phenomenon. Just what is and is not a Spectre exploit? We have a category name but no boundary. We have a sample of two real exploits—sort of alike. We can be sure that different people will have different concepts on this. This battle will be more like ordinary warfare and we don’t know where the enemy is yet. I fear that it is down to whack-a-mole—narrow fixes to special attacks.
The Spectre paper carefully lays out one particular devastating ‘proof of concept’ and otherwise leaves the scope of “Spectre” undefined.
I propose a fairly precise limit on scope of ”Spectre attack” here.