Apple wins lawsuit claiming it misled users over Spectre and Meltdown security flaws

Spectre
(Image credit: Future)

A class-action lawsuit against Apple for allegedly misleading customers regarding the notoious Spectre and Meltdown vulnerabilities has been dismissed.

Reuters reported U.S. District Judge Edward Davila, in San Jose, California, ruled that the plaintiffs did not prove Apple knew about the vulnerabilities and kept quiet, selling their products at inflated prices, as a result. They also failed to prove Apple provided security patches that significantly slowed down the performance of the devices.

Apple, as well as other tech giants, first reported discovering the two flaws in early 2018. The customers, who filed the class-action lawsuit at the time, claimed Apple knew about the flaws as early as June 2017, but kept quiet about it until a New York Times report basically forced them to speak.

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022

Share your thoughts on Cybersecurity and get a free copy of the Hacker's Manual 2022. Help us find how businesses are preparing for the post-Covid world and the implications of these activities on their cybersecurity plans. Enter your email at the end of this survey to get the bookazine, worth $10.99/£10.99.

Vague claims and affirmative misrepresentation

But the judge says the plaintiffs failed to prove they relied on Apple’s marketing, when making their purchase choices. Apple’s claims that their devices were “secure” and “built with privacy in mind” were too vague to support their claims. The judge also said that Apple’s claims of newer processors being faster than the older ones weren’t false, just because patches may have slowed them down.

"Plaintiffs have failed to allege an affirmative misrepresentation, an actionable omission, and actual reliance" on misstatements by Apple, Davila wrote.

The plaintiffs now have until June 30 to appeal the decision.

Spectre and Meltdown were two major vulnerabilities, discovered in early 2018, which allowed threat actors to read the contents of the memory in a vulnerable endpoint. Following up on the initial reports, researchers later discovered that practically all devices built in the last decade were vulnerable.

It turned out to be one of the greatest vulnerabilities of all time.

To make matters even worse, many OEMs scrambled to get a fix out as soon as possible, pushing incomplete solutions that only slowed the devices down, and in some cases, even bricking them entirely.

Via: Reuters

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
An abstract image of a lock against a digital background, denoting cybersecurity.
Apple CPU security issue could let hackers steal user data from browsers
Law
Apple to pay $95 million after Siri “unintentionally” recorded private convos
Apple Intelligence Bella Ramsey ad
The Bella Ramsey Apple Intelligence ad that disappeared, and why Apple is now facing a false advertising lawsuit
Apple watch pair with iphone
Apple sued over 'false and misleading' Apple Watch claims – here's what you need to know
This photograph shows wordmark of Siri, a digital assistant developed by Apple Inc., displayed on a smartphone
Did Siri break the law? Apple's latest privacy complaint in France doesn't bode well
Security
Intel slams Nvidia and AMD, claims chip giants have huge numbers of security flaws
Latest in Security
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple H3C Magic routers hit by critical severity remote command injection, with no fix in sight
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
An abstract image of digital security.
Fake file converters are stealing info, pushing ransomware, FBI warns
Latest in News
Samsung Galaxy S25 from the front
The Now Bar on Samsung One UI 7 is about to get a lot more useful – and could soon match Live Activities on iOS
Marvel Rivals
Marvel Rivals will get two new hero skins for Moon Knight and Black Panther this week meaning I'll now need to farm even more Units
Netflix Ads
Netflix adds HDR10+ support – great news for Samsung TV owners, but don't expect LG and Sony to do the same any time soon
Klipsch Klipschorn AK7 in a room with lots of dark wood furniture and a bare brick wall
Klipsch just updated two of its most iconic stereo speaker designs, keeping these beautiful retro icons on your most-wanted list
FiiO FX17 IEMs
Our favorite budget audiophile brand unveils wired earbuds with 26(!) drivers, electrostatic units, USB-C ultra-Hi-Res Audio, and a not-so-budget price
Nvidia RTX 5080 against a yellow TechRadar background
RTX 5080 24GB version teased by MSI - is it time to admit that 16GB isn't enough for 4K?