Best practice would have been to offer a solution for people, us consumers, that offers a set of patches that closes all security holes and fixes the issues. "Best practice" in this case means, best case for the company, not the consumer. They did what they had to do (and were ready with their aimed at time to release the microcode fixes), but they had half a year and the mainboard vendors did not do or get anything. All they have to do is compile BIOS files and offer them on their homepages. As Intel knew about that half a year already, as well as some others say that AMD did as well, it's actually quite a shame that a bug that could be potentially destructive and performance degrading to virtually every known and used (Intel) machine does not get treated with zero day patches. Yes, the two of us seem to see different things as "best practice". What's the reason they did not talk to any of the mainboard manufacturers or Microsoft for half a year to let them know that they have issues and they need to fix and test things, as well as implement them? Is there no way they could have put in some extra hours and delivered the microcode updates to the vendors a week before disclosure so that we could have a chance to not even be in the situation to be vulvernable after disclosure? Oddly convenient that their CEO could sell some of their shares at their higher price before it drops in conjunction with Meltdown / Spectre vulnerabilities. Oh yes, "best practice". Best practice in my opinion would be, if my product is faulty (which the CPUs are), it should be the companies responsibility to do what they can to offer a sollution as fast as they can. And I personally did not see that happening here with 6 months of virtually doing nothing besides trying to get around lawsuits (I guess they were trying to work around Meltdown performance decreases to not have so many people sue them in the company's best interest. Interestingly google accomplished to work around the performance decrease two weeks after disclosure for their workstation and servers, and we guys neither get updated BIOSs or flawless OS patches.) Oh and by the way, I do understand what you are trying to say, but thanks for your patronizing matter to talk to people. I guess you are generally successful with such a way of talking to others. Welcome to the fabulous ignore list of fantaskarsef, where people like you seem to be well taken care of. Free lodging, reduced rates on drinks and food. Because that's "best practice" to handle downtalking people like you who think a different opinion means that people are stupid and don't understand.