https://dl.acm.org/doi/10.5555/3195638.3195686
https://www.vusec.net/projects/anc/
New timing attacks that break ASLR come out ~annually. These are hardware mechanisms that cannot be mitigated by software. ASLR is broken. (Nevermind ROP gadget compilers, etc.)