What security issue?

What security issue?

I think a more reliable leak is to then write in the page, and see if the write takes a long time (due to copy-on-write). There were other potential information leaks discussed, but IMO they were all pretty far-fetched and can be defended against (e.g., don't make it predictable when pages will be merged; on the application side, when inputting passwords, initialize the buffer with random data).