The first section on cache timing seems off.

"The one which is being read is cached, and the exception will be raised much faster as a result."

I only read the project zero post, not the paper, but I don't recall it having anything to do with timing of exceptions. I don't see the point or relevance of this section.

Might be missing something.

Edit: mixed up Meltdown with Spectre, I'll take a closer look at this later