You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
You can only leak memory access patterns with this, not data (all the Intel insanity directly leaks data). We already know data-dependent memory access are unsafe, this has been a problem for decades and any sane crypto code avoids it.
This attack can be used together with Spectre v1 (which is unpatchable in CPUs). The fix here is to add barriers to software where this matters. You can always use memory addressing as a side channel whenever you share memory; this is just one (efficient) way of doing it.
AFAICT the main thing this new attack hurts is ASLR, but honestly, ASLR is becoming less and less relevant in the "you can run code on the target machine" scenario. Way too many side channels to choose from. This is just one of them. ASLR is just a mitigation, not security.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
