Reading privileged memory with a side-channel
Papers describing each attack:<p><a href="https://meltdownattack.com/meltdown.pdf" rel="nofollow">https://meltdownattack.com/meltdown.pdf</a><p><a href="https://spectreattack.com/spectre.pdf" rel="nofollow">https://spectreattack.com/spectre.pdf</a><p>From the spectre paper:<p>>As  a  proof-of-concept,   JavaScript  code  was  written
that,  when  run  in  the  Google  Chrome  browser,  allows
JavaScript  to  read  private  memory  from  the  process
in  which  it  runs  (cf.  Listing  2).<p>Scary stuff.