| The linked thread suggests that Spectre doesn't have _any_ mitigation. > The business/economic implications are not clear, since eventually the only way to eradicate the threat posed by Spectre is to swap out hardware. Is this fully accurate, there's no software mitigation available now? From [0], the above may be true: > There is also work to harden software against future exploitation of Spectre, respectively to patch software after exploitation through Spectre . There is 'work'? No current patch? So Spectre is unpatched? This point doesn't seem to be being highlighted but appears particularly important. [0] https://meltdownattack.com/#faq-fix |
On the positive side, the flaw is very difficult to exploit in a practical setting.