Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2].

Comments

Recent Techrights' Posts

Twitter as X-Rated Hatred: Criticising Microsoft is Not OK, Calling for Beheadings (With Bounties on People's Heads) is OK
Twitter automation missed 'hit job' advertising
Balancing Activism Against (or With) Basic Necessities and Daniel Cantarín on Our Collective Battle for Software Freedom Around the World
"I'm VERY angry about lots of stuff happening here in Argentina, all of it shielded behind the word "freedom"."
 
Links 16/08/2024: YouTube Bans and Surveillance Expanded
Links for the day
We Were Right All Along and the Collaborators of Microsoft Helped Competition Crimes of Microsoft
Once again vindicated regarding UEFI "secure boot"
[Meme] The New Windows Slogan
stat me up
Addendum: Associate's Notes on Free Software as a Labour Issue and the Connectivity Swindles
these are related issues/causes
Microsofters Infiltrating Roles of Authority and Government Positions to Protect Microsoft and to FUD Microsoft's Competition
friends of Microsofters who bully me and my wife
Links 16/08/2024: UK Skills Deficit and Kim Dotcom to be Extradited to the US (for Doing the Same Stuff GAFAM Does)
Links for the day
Gemini Links 16/08/2024: Overgeneralisation and Games
Links for the day
Russia's Yandex 5 Times Bigger Than Microsoft... in Ukraine
They'd rather rely on the Kremlin than on Microsoft
[Meme] Gemini is Different, So What?
different, not worse
Now It's "Official": Over 4,000 Known Gemini Capsules in Lupa
For the first time ever
Clown Computing
Reprinted with permission from Dr. Andy Farnell
[Meme] What Freedom Means to IBM
Free labou
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, August 15, 2024
IRC logs for Thursday, August 15, 2024
From 99% in 2012 to 27% in 2024: How Microsoft Lost Georgia
What we're seeing is a migration from Windows to other platforms, notably GNU/Linux
To Understand Cisco's Mass Layoffs Look at the Company's Soaring Debt (Same at Microsoft)
Look what's happening to Intel - down almost 60% since the start of the year, 57% to be precise
Windows Flying Low at 25%
It's another all-time low
[Meme] Long Texts You Never Bother Reading (Because Life is Too Short, Unlike Those Texts)
The devil is in the terms of service
Links 15/08/2024: Monkeypox Hysteria and Modern Homesteaders Living Off the Grid
Links for the day
Gemini Links 15/08/2024: Confession of a Convention Game Master and Some Release nostalgia
Links for the day
Congratulations to Romania, Where Windows is Now "Minority Market Share" Platform
Time will tell if GNU/Linux can pass 5% on the desktop/laptop "form factor" there
Why It Matters That 4,000 Gemini Capsules Are Known to Lupa and Why Gemini Protocol Matters to Us
I have no doubt Gemini Protocol will continue to expand because it solves a real problem
Links 15/08/2024: Avast Surveillance Scandal Unsolved and Facebook Still Censors Terror Sympathisers
Links for the day
Daniel Cantarín's Response to Alexandre Oliva's Talk on Achieving Software Freedom in the Age of Platform Decay
Soylent News caught up with the series
4,000 Gemini Capsules
it's basically one capsule short of 4,000
"Microsoft is a Sponsor of The New Stack."
Many articles turn out to be just ads
New Highs for Android in Russia, But It's Reportedly Working on Its Own Linux-Based Operating Systems (GAFAM-Free)
statCounter isn't equipped to properly parse user agents or to keep up
Upcoming Series: Terms of Service (TOS) Under the Microscope, FSF Party, GitHub Scandals, Clowns, and More
Right now we have way more material than we have time to cover. But that's a good thing.
Gemini Links 15/08/2024: Lies of Therapy and Web Applications
Links for the day
Software Freedom in Perspective - Part 5 - When Richard Stallman Came to Argentina
It might seem a bit harsh, but a discussion at the end of this series will tie things together and explain why those things were said
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, August 14, 2024
IRC logs for Wednesday, August 14, 2024
Russia develops an alternative to Android and iOS | News.az
Russia already has several of its own operating systems
Links 14/08/2024: Ecology and War Inside Russia
Links for the day
Daniel Pocock - Use of Technology in European Parliament Election Campaign (Public Talk)
It starts in 4 hours
Android About to Fly Past Windows in Portugal
Perhaps by month's end or next month Portugal will be orange (Android majority)
How OpenAI Will Decrease the Losses
You have no losses when you have no users left
Giving Control to Microsoft is Always a Dire, Huge Mistake
Microsoft is known for buying things and sabotaging things, not for creating things
Founders That Sell Their Company to Microsoft Speak Out
"Microsoft's closure of Arkane Austin in May was one of the more shocking events of the past couple of years"
In Chile, Microsoft's Web Browser (a Chrome Copycat) Fell to 3.6%, About the Same as Firefox and Opera and Less Than Safari, Yandex Browser, Google Chrome
It does not look like Chileans fancy Microsoft's browser. They go out of their way to use something else, even on Windows.
Software Freedom in Perspective - Part 4 - Daniel on Linux-based Mobile Platforms in LATAM (Latin America)
GNU, Linux, and mobile
Almost Nothing of Invidious Left Online (YouTube is Attacking Gateways)
what it looks like at this very moment
Gemini Links 14/08/2024: Funeral for an E-reader and a Mother Wants a Laptop
Links for the day
Links 14/08/2024: 8 Years of GDPR and Ridicule of "Hey Hi" (AI) Hype
Links for the day
This is How You Give Microsoft More Control Over LibreOffice Both as Software and as a Project
Didn't the Document Foundation learn from prior Microsoft Store scandals connected to LibreOffice?
"Heroes of Fedora" Are Just Salaried Employees of IBM (But "Community" is Just Sounding a Lot Nicer)
A real community would not allow IBM a majority
YouTube Has Thrown Free Software Users Into a Crisis
For many Free software users, who rely on Invidious, YouTube is nearly dead already
[Meme] "New Chapter in the FSF."
We expect to have some coverage from this week's event
There is No I in "GAFAM" and Soon There Won't be I At All (Like Novell Vanished, Not Overnight, as It Took Over a Decade)
Intel is going through the biggest crisis in its entire history
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, August 13, 2024
IRC logs for Tuesday, August 13, 2024
It's a "sm0l" World and It Won't Outsource to the Pentagon Anymore
As many people aren't interested in a new PC - or simply cannot afford one - we can expect leaner operating systems to gain further
Software Freedom in Perspective - Part 3 - GNU/Linux in Argentinian Desktops/Laptops
Daniel explains why many years ago many PCs shipped with GNU/Linux and that there was an economic reason for it. At least in Argentina.
Tivoisation and Decommodification in Clown Computing
Some firms or organisations lost sight of what "servers" or "hosting" even mean
The News Vacuum
The problem is worse than just an absence of reporting
x86 Lowered the Standards of Hardware Products
A lot of it is just hacks and cheats that help fake performance