WRT the Intel speculative execution security bug, note that software mitigation is pretty cheap except for I/O intensive workloads on fast SSDs: https://t.co/EjbKBF5dTA