> - Ability to install a custom kext to make the PACMAN Gadget work. The exploit requires access to undocumented registers on the M1 that are apparently not accessible from user space, but this is a bit unclear.
^ This is not the case, you can trigger these from userspace in valid syscalls. The same behaviour was in spectre.
^ This is not the case, you can trigger these from userspace in valid syscalls. The same behaviour was in spectre.