Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2]. ⬆

Comments

Recent Techrights' Posts

No Noticeable Libera Chat Exodus After Code of Censorship (CoC) Scandal Earlier This Month
Libera Chat pissed off some people by unmasking the CoC's real purpose
 
Intercontinental Brigading - Part IV - Harassment Registered With the Police Before Projection Attempts Made From America
The thing one gets subjected to for opposing back doors in Linux
Gemini Links 16/10/2026: Dogs, Slop, and Blogging
Links for the day
The Fate of "Alicante Mafia" at the EPO Yet to Be Determined
It'll be interesting to hear what they say about the secret meeting regarding the future of Campinos
Gemini Links 15/10/2026: Medical Difficulty, Science Fiction, and Playstation 3 Dies
Links for the day
Links 15/10/2026: Cuts to Public Health and Misuse of License Plate Data for Social Control
Links for the day
Links 15/10/2026: ALPRs Are Mass Surveillance, GAFAM Front Group ('New' EFF) Asks the Wisconsin Supreme Court to End Warrantless ALPR Searches
Links for the day
IBM RAs: "It's on Me"
IBM has no respect for the workers and it tries to hide the layoffs
Gemini Links 15/10/2026: Literature, Funerals, and Devices
Links for the day
The Efforts to Criminalise Opposition to a Ponzi Scheme Sold as "Super Intelligence" (Plagiarism Engines, Disinformation Generators)
Cops are becoming combatants for slop bros, i.e. they use power to promote a Ponzi scheme
Clownflare Sees Most Requests in Africa Coming From Android (Linux)
Android is the dominant platform
IBM's "RA Season" is Nearly Upon Us, But Tens of Thousands Are Already Marked for Removal With PIPs (as "Low Performers")
IBM is a dying company
Microsoft Has Confirmed It Had a Plan to Cut Azure (or Azure Costs) by 20%
So basically... yes! Microsoft did have a plan to slash Azure.
Red Hat Silent Layoffs Seem to Carry on Throughout This Month
How much longer will these silent layoffs (e.g. PIPs) carry on for?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 14, 2026
IRC logs for Wednesday, October 14, 2026
Netflix and Its Newest Rival Carry 100 Billion Dollars in Debt
What sort of economy is this?
Egypt: GNU/Linux Still Measured at About 5%
Egypt is a prominent African nation and economy
Gemini Links 14/10/2026: Time Allocation, English as a Fourth Language, and "Reading News Sources" in Geminispace
Links for the day
DRM Giant Announces Giant Layoffs (Netflix’s Debt is Huge)
It's not like operational costs are decreasing, they're climbing fast.
Intercontinental Brigading - Part III - Reporting Harassment From America to British Police
Why are they so hostile towards (and afraid of) cops?
The Local Staff Committee Munich (LSCMN) Speaks of Deterioration of Working Conditions at the European Patent Office (EPO)
"At least 3 days per week in the Office for an allocated office"
Gemini Links 14/10/2026: GemPub, Randogoth Forge F-Droid Repo, Oddμ, and Kolibri
Links for the day
Bluewashing as Silent RAs: A "journey that began at Neudesic [...] and continued as part of IBM" inevitably came "to a close"
IBM can be antagonistic and reckless with whatever it buys
Links 14/10/2026: Houthi Attacks on KSA and Airstrikes Near Sudan-Egypt Border
Links for the day
No Coronation for 'Cocaine King' Campinos (Not Yet Anyway)
A flash update suggests perils exist and we must all wait until December as the position for EPO President may open
In Reddit, Moderators of IBM Subs Are Allegedly on IBM's Payroll (IBM Can Censor Discussions About IBM)
There also seem to be PIP layoffs in India
If Worthless Companies Are Valued at a Billion Dollars in the Slop Industry, Then What Is the True Worth of 'Trillion-Dollar' Companies?
Definitely not a bubble!
It Sounds Like Microsoft Plans to Lay Off Over 2,000 Azure (Microsoft) Workers as the Datacentre Business Brings Nothing But Epic Debt
Trillions in losses is not a solid business plan
IBM's Anderon is Like Theranos, But Will Anybody at IBM or Anderon Be Imprisoned for This Billion-Dollar Scam?
Will anyone ever be held accountable for it?
Microsoft XBox Won't Survive, Microsoft's CEO for This Perishing Business Turns to Slop
What the founder or father of XBox said about Asha Sharma earlier this year turns out to be accurate
Links 14/10/2026: So-called 'AI' Giants Go Bankrupt, "Military Will Hack the Election"
Links for the day
Indoor Season
we have more planned in order to improve navigation, accessibility, and workflows
Microsoft Demands That Staff Keeps Silent About the Mass Layoffs
Way to cause anger and ensure whistleblowers will go to the media
Microsoft Has Had Mass Layoffs in Azure Every Year Since 2020 and the Bleeding Continues Because It Misreports Earnings There
This is a bad week for Microsoft
Microsoft's International Mass Layoffs (Asia, Europe, Africa), Now Vietnam
A crisis that Microsoft is unable to hide
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, October 13, 2026
IRC logs for Tuesday, October 13, 2026
Gemini Links 14/10/2026: Ceiling Fan, Fascism, Democracy, and Slop Being a Huge Bubble
Links for the day