Indeed. I was discussing measuring execution port latency with various folks earlier this year. This was a known vulnerability, at least theoretically, but nonetheless the #PortSmash researchers did the hard work to prove that this was true #Spectre #Cache #sidechannelhttps://twitter.com/marcan42/status/1058404629476569088 …
The problem is that nobody did anything about the theoretical vuln until it was practically demonstrated. We have a terrible culture of "if nobody breaks it it's fine even when we know it's not".
