Updated Spectre and Meltdown Presentation

Today I gave an updated presentation about Meltdown and Spectre for SANS APAC (at an APAC friendly time).  I’ll post the video from the new webcast when I have it.  In the meantime, you can download slides here:

Updated Meltdown/Spectre Presentation Slides

 

A few useful links from the presentation are included below:

Verifying Meltdown/Spectre protections on Windows

• http://rsec.us/VerifyWindowsMeltdown

Detecting Spectre exploitation with performance counters

• http://rsec.us/SpectrePerformanceCounters

Checking browser vulnerability for Spectre

• http://rsec.us/SpectreVulnerableCheck

Meltdown/Spectre Enterprise Action Plan

• http://rsec.us/MeltdownActionPlan

Walkthrough of Variants 1-3 (and 3a)

• http://rsec.us/SpectreWalkthrough

Enabling Chrome Site Isolation

• http://rsec.us/ChromeSiteIsolation

Windows Meltdown Patch Antivirus Status

• http://rsec.us/MeltdownPatchCompat