Hacker News Reader

Skimmed this really fast, but is this just bypassing PAC by brute-forcing the code with speculative execution?

Pretty much!

(There are a few aspects that make this challenging in practice, but that's the idea).

cool, thanks!