Cloudflare revisits remote Spectre attacks and updates Worker defenses
Cloudflare revisited remote Spectre attacks against Cloudflare Workers after finding a limitation in Dynamic Process Isolation (DyPrIs). It demonstrated a reliable production attack leaking up to 12 bit/s with 99% accuracy, then improved DyPrIs by integrating the V8 Sandbox and an in-process isolation mechanism to reduce memory-disclosure risk from speculative execution.