Re: uncertain
No, timing is a side channel. It leaks information; that's the definition of a side channel. The attacker finds gadgets which will probe the inaccessible address space for a range of values, and then uses the timing as signal to find out which value was correct.
Spectre-class attacks are actually quite straightforward, by the standards of this field.
Biting the hand that feeds IT
