You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
This attack can be used together with Spectre v1 (which is unpatchable in CPUs). The fix here is to add barriers to software where this matters. You can always use memory addressing as a side channel whenever you share memory; this is just one (efficient) way of doing it.
AFAICT the main thing this new attack hurts is ASLR, but honestly, ASLR is becoming less and less relevant in the "you can run code on the target machine" scenario. Way too many side channels to choose from. This is just one of them. ASLR is just a mitigation, not security.
