Reading privileged memory with a side-channel
Papers describing each attack:https://meltdownattack.com/meltdown.pdfhttps://spectreattack.com/spectre.pdfFrom the spectre paper:>As  a  proof-of-concept,   JavaScript  code  was  written
that,  when  run  in  the  Google  Chrome  browser,  allows
JavaScript  to  read  private  memory  from  the  process
in  which  it  runs  (cf.  Listing  2).Scary stuff.