31·
2 days agoThis isn’t really the same kind of bug. Those bugs made instructions emit the wrong answer, which is obviously really bad, and they’re really rare. The bugs in the article make instructions take different amounts of time depending on what else the CPU has done recently, which isn’t something anyone would notice except that by asking the kernel to do something and measuring the time to execute affected instructions, an attacker that only had usermode access could learn secrets that should only be available to the kernel.
A quick search says steel, tungsten and bismuth or composites including those metals are the typical replacements. Steel is cheap, and the other two are dense but more expensive.