To show how browsers can guard against the speculative execution bug, Google security researchers have shown how an attack would work.