IN 2021, Cloudflare developed a defense against remote Spectre attacks called Dynamic Process Isolation (DyPrIs), which separates malicious scripts into different processes. Recent assessments showed that despite improvements, a remote Spectre attack could reliably leak data at 12 bits per second with 99% accuracy in Cloudflare Workers. This prompted further enhancements to DyPrIs and integration of the V8 Sandbox to mitigate memory disclosure risks.
The attack demonstrates how speculatively executed instructions can expose information, and it highlights the importance of co-locating attacker and victim scripts within the same environment. Despite detection measures in place, the combination of increased isolation and enhanced security practices is necessary to protect against evolving threats.