I believe according the HN rules original sources should be preferred over journalistic coverage.
But given the fact that probably a minority here will greatly benefit from the academic paper or the patches, I'd say the Arstechnica article is an excellent compromise.
Edit: The article is well-written IMHO, but I nearly did classify "sends scrambling" in the title as clickbait not worth opening.
That's not in HN's rules - original sources are preferred but often good reporting is the best source especially when the thing being reported has multiple sources. The goal is really quality rather originalness.
* https://comsec.ethz.ch/research/microarch/retbleed/
* https://comsec.ethz.ch/wp-content/files/retbleed_sec22.pdf
* https://www.youtube.com/watch?v=dmSPvJxPm80
* https://arstechnica.com/information-technology/2022/07/intel...
* https://www.theregister.com/2022/07/12/amd_intel_retbleed/
* https://www.phoronix.com/scan.php?page=news_item&px=RETBLEED
* https://regmedia.co.uk/2022/07/12/handout_retbleed_amd.pdf
* https://www.intel.com/content/www/us/en/developer/articles/t...
* https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
* https://www.intel.com/content/www/us/en/security-center/advi...
* https://www.intel.com/content/www/us/en/security-center/advi...