Meltdown and Spectre Fix for Predator 17 G9-793-79 v5

Squatta

I have purchased this laptop, but forgot my Serial Number today (I was going to chat with them about this at work). Anyways, does anyone know when ACER will be getting together with Intel to get this massive hole patched. I have already patched Windows 10, but from what I understand this is a hardware issue and the best way to fix it is to get your drivers and firmware updated (even though this doesn't fix the issue at the hardware level). I read that Intel will not be directly patching these, as the patches need to be designed specific to the computer model. From what I have read, Acer would have to work with Intel and create a patch to fix this. Anyone have any more information about this. 

Skelomorph

Spectre Variant 1 requires updates to Browsers, Javascript, and OS.

Spectre Variant 2 requires a BIOS update.

Spectre Variant 3 (Meltdown) is patched VIA Windows Updates or similar OS patches.

The Intel ME Vulnerability is patched using a BIOS Update.

The main ones to really be cautious of are Spectre Variant 1 and Variant 3 Meltdown, which were patched the quickest and require a core rewrite to CPU architecture to resolve the issue, and there are no new Intel CPUs have have this rewrite yet.

Spectre Variant 2 vulnerability is mostly dangerous in VM environments (Servers hosting virtual machines with remote access connection, allows seeing content on other VMs and executing code on host machine). 

The Intel ME vulnerability has not been patch by Acer on any device as of yet (that I know of).


This is what I posted in another thread:

It does seem like a long time. However, the BIOS patch does not solve it totally. The Spectre Vulnerability's main example seems to be javascript in Web Browsers. However, there are methods to make it impossible for code in web browsers to go outside of their processes and can be enabled. Also, the BIOS patch is not a fix, but a band aid, so it is likely that if this method is taken advantage of, they will find a way around the band aid. 

For Chrome and its variants, you can enable Site Isolation in Chrome://flags. This flag will automatically be enabled in Chrome 64 that is to be released January 23. The Firefox version 57.0.4+ is already patched for this, as well as Windows Edge and IE, if you are keeping Windows updated.

The Intel ME vulnerabilities essentially require local access or local network access. So, you would need someone on your network (your personal WIFI should be password protected, stay away from public WIFI) or having access to your computer (password protection for Windows & BIOS will stop this) to be vulnerable. This would include viruses, but if you get certain types of virus, your information can be stolen anyways.

So really, the best protection against this is yourself. Be careful what you download and web sites you go to, enable the options for Web Browsers and keep them up to date, and keep your Windows up to date.

brummyfan2 said:

Hi,
I don't think your model is affected by this as Acer hasn't included in their list:https://us.answers.acer.com/app/answers/detail/a_id/53104/~/meltdown-and-spectre-security-vulnerabilities#_ga=2.3118064.1138587072.1513790624-1021884794.1513790624

Would it be accurate to say then, that the latest VBIOS updates (1.13) for the Predators patched the Spectre 2 Variant since none of them are on the list?

Skelo