Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2].

Comments

Recent Techrights' Posts

In Central African Republic Windows Has Pretty Much Fallen to Zero
We need to focus on Software Freedom
Microsoft Windows Down to 8.5% in South Africa
South Africa and Egypt are strategic in Africa
New Series: A Deep Dive Into the Severe Corruption of the Open Source Initiative (OSI), Nowadays a Front Group and Lobbyist of Microsoft
There's a lot to show
Doing Free Software for a Living in an Era or a Time of Abundance of Code (and Fast Internet to Pass It Around Freely) or Writing When the Web is Attacked by LLM Slop
Tailoring code to needs is the key
The UEFI hype and Microsoft's lies
By Sami Tikkanen
 
Gemini Links 03/03/2025: Copyrights, GrapheneOS, and SpaceBeans
Links for the day
Links 03/03/2025: Europe Rallies Behind Ukraine, Measles Flourishes in US Again
Links for the day
After Fund-raising Campaign the Free Software Foundation Still Raises About $13,000 Per Week (Without Campaigning for New Donors/Members)
Richard Stallman in the Board is not a liability
Links 03/03/2025: 'Monetisation' Myth' and Microsoft's LLMs Helping Criminals
Links for the day
The New Series About the Open Source Initiative (OSI) and the Microsoft Entryism in OSI is Closely Related to the SLAPP Against Techrights
Also based on the leading publication that they want removed
Links 03/03/2025: Mass Layoffs in IBM China, Intel Still in Trouble
Links for the day
3 Out of 4 in Cuba Use Linux to Access the Web
Maybe change does come about...
Links 02/03/2025: Day Off, POWER9, Console Challenge
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, March 02, 2025
IRC logs for Sunday, March 02, 2025
Microsoft Windows Falls to All-Time Low in Thailand
We're seeing many all-time records like these so far in 2025
Gemini Links 02/03/2025: Snowdrop Flower and Hostile Leaders
Links for the day
Links 02/03/2025: Microsoft Outlook Goes Offline, Foreign-Owned Social Control Media Interfering With Fair Elections
Links for the day
According to statCounter, Windows Falls Off a Cliff in Maharlika, GNU/Linux Surges to 5%
But mobile is king
New Video Clip of Richard Stallman's Latest Visit to and Talks in Italy
Richard Stallman or RMS giving his latest talk last week
Windows Used by Only One in Six Asians to Access the Web, According to statCounter
maybe more governments in Asia should move away from Microsoft
GNU/Linux Reaches 5% in Brazil, an All-Time High According to statCounter
There are hundreds of millions of people in that country
Google Already Dominates the Global South (via Android/Linux)
If one puts aside Russia and east Europe, not many countries exist that still connect to the Web from Windows more than from Android
GNU/Linux Widespread in Finland, Sweden, and Norway
Sweden has many Chromebooks in schools3 nations
Germany's Incoming Leader Said He'd Seek More Independence from the US, GNU/Linux Soars to 6%
Last month it was 5%
For the First Time GNU/Linux is Measured at Over 4% in Europe (Not Counting ChromeOS/Chromebooks)
Europe, on average, is now estimated to have GNU/Linux on 1 in 25 Web-connected laptops/desktops
Over 2 Years of LLM Hype and Nothing to Show for It
People still use search, not chatbots
Apple's iOS Almost Bigger Than Windows Now (Internationally), Windows Falls to 22% According to statCounter
Without Windows domination, there's not much left going for Microsoft
Putin's Loyal DOGE
We hereby crown Arvind Krishna "Putin's DOGE"
The Media Barely Reported This (Late Friday): IBM Lays Off About 2,000 More Workers, Effective Hours Ago
Maybe some diversity programs can help IBM recruit slaves or grossly-underpaid staff
Microsoft Money Being Spent to Bully Techrights Only Legitimises Techrights
The longer it goes on for, the greater the Streisand Effect
Suing One's Way Out of Real Trouble Won't Work (It Merely Increases the Trouble)
"Guns for hire" in London can only issue "legal" threats
Microsoft Writing Articles About Microsoft, Using Microsoft LLMs
Right now there are many articles about Microsoft Outlook being down completely
Gemini Links 02/03/2025: OFFLFIRSOCH 2025 and Programming
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, March 01, 2025
IRC logs for Saturday, March 01, 2025
Another Day and Another LLM Slopfest From Madame Day at the Slopfarm LinuxSecurity.com
Can't take a break, can she?
Sucking Up to Fascists (Like IBM's Watson Sucked Up to Adolf Hitler in the 1930s) Did Not Help IBM
IBM could stick to better principles, but instead it treats the Free software community and even its own staff like trash
Links 01/03/2025: GB News Loses Over 100 Million Pounds, Zelensky Wins World's Sympathy
Links for the day
Getting Serial Sloppers to Knock the Habit of Plagiarism by LLM Slop
All in all, the fewer the slop objects, the better
As Prices Soar and Services Shut Down (Even YouTube Starts Demanding Money for the Original or a Tolerable Experience) It's Time to Explore the Real Alternatives
https://inv.nadeko.net is the most viable instance of Invidious these days
Gemini Links 01/03/2025: Amends and GNU/Linux
Links for the day
Links 01/03/2025: Scam Altman's Latest Excuse, Google Price Hikes
Links for the day
Justice Will Find Its Way at the End
We deserve an award, not SLAPP, for what we've done
March Already, Rumours of IBM Layoffs in Brazil
Red Hat might be impacted too
Links 01/03/2025: Squashing Software Patents, USPTO Facing Additional Cuts
Links for the day
Links 01/03/2025: UNM Gopher and Getting One's Pages on gemini://
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, February 28, 2025
IRC logs for Friday, February 28, 2025