Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2]. ⬆

Comments

Recent Techrights' Posts

“Week van de Werkstress” and Work-Related Stress at the EPO, Where Staff is Bullied Into Granting Illegal Patents for Foreign Monopolists
"poor working environments, including discrimination and inequality, excessive workloads, low job control and job insecurity pose a risk to mental health"
Czech Republic: GNU/Linux Rises Above 5% in Desktops and Laptops
A year ago it was somewhere around 4%
Intercontinental Brigading - Part XXXXII - Running One's Mouth
British Police told me "making a false complaint to police is a crime" in relation to Lozza
 
Complexity is the Tyrant's Friend
Slop is for feeble minds and cheaters
IBM Firings (or Silent Layoffs) After Bluewashing; "IBM’s Employment History is More Troubling Than its Patriotic Marketing Suggests"
"It has zip to do with race but everything to do with the greed of the 1% who have been doing all they can to destroy the middle class..."
EPO's Local Staff Committee The Hague Says Almost or About a Third of Staff Assembled to Organise at "a Time of Continued Social Unrest"
They speak of "circa 850 staff members in attendance" (in The Netherlands there are about a couple thousand)
Suggestions That XBox Will be Offloaded by Microsoft, Rather Than Shut Down, Make the False Assumption XBox is Profitable (It's Not, It's a Liability)
Microsoft has serious financial troubles
Which "Smart" "Phone", Which "Social" "Media", and Which "Cloud" "Storage"?
Let's take back control of the language
State of the (Linux) Slop, Late 2026 Edition
Google News (Gulag Noise) is a plagiarism booster
Year 21
It's 5PM here
Links 07/11/2026: "Flock Cameras Got Eviscerated by the Midterms" and Joshua Wong Shows China is Highly Repressive and Fully Controls Hong Kong
Links for the day
At The Register MS the Net Liabilities Doubled in One Year, Tangible Assets Down About 35% in One Year
signed off in 2026
Another 20 Years of Exposing Corruption
We'll focus on carrying on what we do
EPO Budget and Finance Committee (in Very Recent Meeting) Increases Bribes to People Who Vote on Campinos Reappointment ("Cooperation Activities")
Buying 'elections' to protect the cocaine-stained regime in Europe's second-largest institution
Links 07/11/2026: London's SLAPP Industry Now Targets Kirkenes (Northern Norway) at the Behest of Corrupt Thieves in Russia and Microsoft’s 'Buyout' Offer Crashes Microsoft Systems
Links for the day
Links 07/11/2026: "The Moon is Waning Crescent", Homeworlds, and "Can't Handle The AVIF!"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, November 06, 2026
IRC logs for Friday, November 06, 2026
IBM Compels Workers - Even at Red Hat - to Become "Retired-ish"
Who needs RAs (layoffs, which have been rebranded as "buyouts" like pink slips are generous "gifts") when workers can have their butts kicked every day and WARN Act reporting thresholds are never approached?
Links 06/11/2026: "XBox Is Closer Than Ever to Being Sold Off" and "BuzzFeed Stock in Free Fall"
Links for the day
Gemini Links 06/11/2026: Dao and Dreams
Links for the day
20 Years of Techrights
Celebrating 2 decades of abuses of power being watched (and looking back at key changes)
Linux (and Linus Torvalds) Sleepwalking Into a Binance-Level Catastrophe With Slop 'Code'
Someone should ask Linus Torvalds or his boss (Linux Foundation) if they deem slop, which nobody audits, trustworthy enough to add to every computer out there running the Linux kernel
Vitaly Orlov Weaponises Deep Pockets to Leverage High Court of Justice in London for Censorship and Punishment of Critics
reproduced in full for more exposure and to make censorship harder
Intercontinental Brigading - Part XXXXI - What I Told British Police About Lozza the Same Month Garrett Was Preparing His First Nastygram From 'Hired Guns' Brett Wilson LLP
Lozza and Garrett
Outsourcing at IBM
Cheapening of the workforce is hardly a new problem
The Register MS: Turnover Fell by Over a Million Pounds (About 20%) in One Year, Administrative Expenses Rose by Almost Half a Million Pounds, The Register MS Operates at a Loss
This is not a (commercially) healthy publisher
Links 06/11/2026: Slop "Companies Race to Lock Down Oil Clients" and Salon Shuts Down
Links for the day
Our Third Decade
Our anniversary is tonight at midnight
Freedom Is Not Free of Charge, Freedom Can be Very Expensive
Being someone's "slave" is the "default" when no resistance exists
Intercontinental Brigading - Part XXXX - Swatting by Proxy
Using imbeciles who lie to cops and then dox cops (and already have arrest record and court documents wherein they admit being stoned in front of the cops)
Intel Craters at Taxpayers' Expense (Bailouts for Failing Companies Simple Don't Work)
GOP, which did this, has lost many seats
Mass Layoffs at IBM, Also Outsourcing to India
What IBM does to itself it is doing to other entities as well
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 05, 2026
IRC logs for Thursday, November 05, 2026
During Strikes and Industrial Actions Lots of EPO Staff Organised Yesterday and Will Do the Same Next Week
There really needs to be a genuine election, not a reappointment
Gemini Links 06/11/2026: Hadestown and "Where Has the Electronics Shop Gone?"
Links for the day
Links 05/11/2026: Rule of Law Vanishing in Turkey, Joshua Wong Still Martyred by Chinese Regime
Links for the day
Gemini Links 05/11/2026: Classical Music, Politics, and Seeed Studio
Links for the day
Like Almost Every Slopfarm, UbuntuBuzz Seems to Have Thrown in the Towel
Linuxsecurity and Linuxiac (to some extent Linuxjournal) are still going, but for how much longer?
EPO 'Midterm' Elections Should Oust the Dictator
Tentatively a failure to secure another (unprecedented) reappointment before Christmas
Secret IBM Layoffs and Increase in PIPs (Silent Layoffs)
The media is failing to do its job
Links 05/11/2026: "Voice is Underutilized" and How Data Centres Lost the Midterm Elections
Links for the day
Intercontinental Brigading - Part XXXIX - Crime Numbers Regarding GGG (Americans) and Why Those Still Matter
Time does not undo the actions
Intercontinental Brigading - Part XXXVIII - Telling the Police About the Defamatory Blog Where Posts Targeted My Wife and I (From Across the Atlantic Ocean)
Two years ago we spoke to cops a lot
The Register MS is Losing Money Again, Based on The Register MS
Selling out didn't pay off for very long
There Are No "Layoffs" Anymore, Layoffs Got Rebranded
We're entering bizarre times when layoffs are said to be "down" (according to the regime that suffered a 'bloodbath' in the election) because companies quit using the term "layoffs"
Gemini Links 05/11/2026: Rivers of London, Soul Cakes, STMicroelectronics, and Slop
Links for the day
The Register MS Has Just Published Fake Article With "AI" 84 Times in the Page Because It Was Paid to Do This!
Astounding number of mentions of "AI" (84 in total)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, November 04, 2026
IRC logs for Wednesday, November 04, 2026