Risk Assessment of Spectre and Meltdown

[Security Wonks <secwonks () GMAIL COM>]

Greetings EDUCAUSE Security Community,

After some discussion in another forum a few folks have put together a
document aimed at IT and security professionals trying to wrap their head
around what to do about Spectre and Meltdown. Here it is:

http://secwonks.org/real-time-risk-assessment-of-spectre-and-meltdown/

This isn’t a technical document, it’s a high-level summary of risk and
suggestions for prioritization (written with a bit of gallows humor).  It
was written by a few current, former, and loosely-affiliated-with members
of the higher-ed security community.

This is TLP:White, you should feel free - and are encouraged - to reshare
and redistribute. We’d love to see this get broader distribution. And
comments welcome!

Regards,

A Random Wonk