Surface 3 finally gets the delayed Spectre and Meltdown patches in long awaited firmware update

[AlTech]

The Surface 3 has finally gotten the delayed and long awaited Spectre and Meltdown patches in the latest Firmware update. The previous firmware update for the Surface 3 came out all the way back in late 2016. It's a bit of a Surprise that it received this patch considering the probably awful sales of the device.

 

Quote

The Surface 3 hasn't received a firmware update since late-2016, but, if you have one lying around, Microsoft is changing things up a bit by pushing a fresh set of fixes out to the device.

The latest updates include compatibility improvements with high-res external displays, along with a patch for the dreaded Spectre and Meltdown security vulnerabilities that were first disclosed in January. Here's a look at what's new:

• Surface – Firmware – 1.51116.198.0 - Surface UEFI – Firmware: 1.51116.198.0 resolves potential security vulnerabilities, including Microsoft security advisory 180002.
• Intel Corporation – Display adapters – 20.19.15.4835 - Intel(R) HD Graphics – Display adapters: 20.19.15.4835 improves compatibility with high resolution external displays on Windows 10 April 2018 Update.

 

So yeah, It is quite bad it took this long to arrive but at least it actually received the patch at all.

 

Source:

https://www.windowscentral.com/surface-3-gets-rare-firmware-update-security-fixes-tow

[ScratchCat]

Still better than most low end Android manufacturers.

 

[Syfes]

4 hours ago, James Evens said:

What is better a device without updates or a broken device which does not work at all?

Neither, both options are almost equally bad...

[ScratchCat]

1 minute ago, Syfes said:

Neither, both options are almost equally bad...

One you can use offline.

4 hours ago, James Evens said:

What is better a device without updates or a broken device which does not work at all?

Both work as far as I know though with Microsoft you are more likely to have your warranty honored.

[Syfes]

Just now, ScratchCat said:

One you can use offline.

I'm so heavily invested in cloud applications these days, that I'm having trouble imagining that this was ever a thing  

[ScratchCat]

19 minutes ago, Syfes said:

I'm so heavily invested in cloud applications these days, that I'm having trouble imagining that this was ever a thing  

Given that most software is now downloaded it is not surprising that most people need to connect the computer to the internet just to configure it.

[mynameisjuan]

2 hours ago, Syfes said:

Neither, both options are almost equally bad...

So you consider one where a devices is literally unusable and essentially a brick is as equally bad as a device that has a vulnerability that is actually quite rare out of the millions of vulnerabilities. Hmmm...

[Zodiark1593]

3 hours ago, mynameisjuan said:

So you consider one where a devices is literally unusable and essentially a brick is as equally bad as a device that has a vulnerability that is actually quite rare out of the millions of vulnerabilities. Hmmm...

Well, depending on what you'e doing on it, one device (the broken one) only outs you the cost of said device. The other could potentially be a liability for far more if sensitive information is used.

[79wjd]

26 minutes ago, Zodiark1593 said:

Well, depending on what you'e doing on it, one device (the broken one) only outs you the cost of said device. The other could potentially be a liability for far more if sensitive information is used.

I mean, if you want to go down that rabbit hole, then there's a very good chance you'll have replaced the broken device (for obvious reasons), and end up with a vulnerable device anyway.

[Christophe Corazza]

Quote

According to Microsoft's Value Indicator chart, this update improves security, and has no effect on reliability, connectivity, compatibility, performance, or battery life.

 

How the hell it doesnt affect "performance" , if its proven even by Intel that it indeed slows down the entire systen?