content: Spectre "hard to exploit locally but javascript exploit exists" Apple says Analysis of these techniques revealed that while they are extremely difficult to exploit, even by an app running locally on a Mac or iOS device, they can be potentially exploited in JavaScript running in a web browser. I don't get it.