Finally understanding Spectre: SharedArrayBuffer was dangerous in a different way than I thought
I knew SharedArrayBuffer was restricted because of Spectre, but vaguely assumed a low-level API helped with some memory exploit. I followed speculation and cache traces through shared-memory clocks, Site Isolation, COOP and COEP, WindowProxy, and Realms.