New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

8 bytes per second sounds like a rounding error until you remember a password hash is only a few dozen of them. VUSec’s new Spectre v2 variant, Branch Target Reuse, pulled a root password hash off a fully patched Intel box with default mitigations enabled - abusing stale branch predictor entries that outlive the JIT code they pointed at. Intel, AMD and Arm all affected. Nine years on, Spectre still isn’t done with us.