[sshb]

Isn't eBPF basically the same idea?

[jssmith]

Yes, but it is more restrictive, e.g., it is not Turing complete. I’m not sure whether this directly addresses Spectre risks though.

An analysis of Spectre and software isolation is here:

https://arxiv.org/abs/1902.05178