Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2].

Comments

Recent Techrights' Posts

It Has Cost $215,000 in Legal Costs to Sue IBM for Wrongful Termination
IBM typically settles out of court and demands secrecy (to avoid anyone else benefiting from the very expensive outcome)
The PIPs or 'Voluntary Termination Offers' Help IBM Fake Its Situation
"IBM is not a tech company"
 
SLAPP Censorship - Part 184 Out of 200: A Tiny Law Firm That Knows Nothing But Microsoft (But Merely Pretends to Understand "IT")
They've managed to trick some mainstream media into thinking they're "Tech" experts or "Social [Control] Media" gurus; nothing could be further from the truth
Links 15/09/2026: Sweden’s Far Right Perishing and "Iceland Just Got Played"
Links for the day
It's Not About How Developers Vote
This isn't about politics, it's about users being in control of their own computers and computing
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 14, 2026
IRC logs for Monday, September 14, 2026
Gemini Links 15/09/2026: Poetry, Enshittification of Ebay, and Mecha System
Links for the day
LG Lies to Cover Up Lies About Its Spying TVs (It Records and Transmits Conversations in Rooms)
This is what a lot of "modern" technology is like
Oracle's Debt Continues to Soar (Increase of 60 Billion Dollars in 15 Months, Not Counting the Secret Debt, With Off-balance-sheet Debt Having "Grown Roughly Thirtyfold in Four Years")
Oracle debt continues to grow
Apple's iOS and macOS Measured as Bigger Than Windows in the US, Linux-Based OSes at Almost 30%
Expect the silent layoffs at Microsoft to continue at a rapid pace
Oracle, Like Microsoft, Drowns in Debt and Discards Tens of Thousands of Staff (Microsoft Does the Same More Discreetly)
The main difference between Microsoft and Oracle is that the latter is honest about what's going on
Gemini Links 14/09/2026: First Android Phone, Leaving Sony, and Rant About Gemini-to-HTTP Proxy Providers
Links for the day
Links 14/09/2026: "Scam Altman Now Trying to Gain Control of Electric Grid" and Sweden Moving to the Right
Links for the day
Vista 11 Flunked
Microsoft cannot start a "Vista 12" campaign as it would only make matters worse
Microsoft Urgently Needs Distraction: There's No "Next XBox", But There's a New Boot Screen (Like 'Dark Mode', a Feature That Can be Implemented in Mere Minutes/Hours)
Anything to distract from XBox fiasco
IBM Flying Away to Sweatshops (So Will Red Hat)
Even on Sunday people post about 'leaving' IBM
RFID Ambitions Already Established by Widespread Skinnerbox Adoption
A society that cannot maintain privacy for those who deserve it will not manage to assure dignity of citizens
SLAPP Censorship - Part 183 Out of 200: What Actually Happened Two Months Ago (Based on People Who Attended)
It's dangerous to assert what happened in a hearing you did not attend (there was no video stream or recording, either)
Phil Harvey, an Editor-in-Chief in a B2B Site, Explains Why ChannelFutures (Connected to TechTarget) and Other Sites That Used to Cover Linux Deleted Many Articles
Every old article in channelfutures is gone!
Software Freedom Day 2026 is 5 Days From Now, Fresh Reminder to Boycott Proprietary Software
Let this be a timely reminder of why people should avoid proprietary software
Links 14/09/2026: Slop Hardly Used for Actual Work (Chatbots Are for Lonely People), Slop Bots (Scrapers, Plagiarism) "Are Thirsty for Power"
Links for the day
Gemini Links 14/09/2026: Trip, Hiding, and OCR
Links for the day
IBM PIPs Are Layoffs (RAs Come Later Even If You Satisfy the "Performance" and "Plan")
Notice how "the media" almost never mentions silent layoffs, as if just because they're silent, there's nothing to investigate, nothing to see there
Slop Companies Engage in Plagiarising the Web, Now They Pay People to Contaminate the Web With Their Lies
Remember that the lawfare against us is funded by slop salaries!
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 13, 2026
IRC logs for Sunday, September 13, 2026
Microsoft is Laying Off All Year Long (It's Just Keeping Quiet About It)
The issue here is also the media. It's complicit.
MElon's Twitter Takeover Was Meant to Amplify People Like Himself or David Heinemeier Hansson (Slop Pyramid Schemes and Bigotry)
Social control media is not neutral
Microsoft Lunduke of 'Linux Sucks' (and Microsoft Corp.) Tries to Replace GNU/Linux With Toxic Discussions About Toxic Politics
Poisoning the well people drink from
General Assembly Covers EPO Strikes on Thursday, September 17th (2026)
The EPO's staff representation at The Hague has asked people to join an upcoming online session about industrial actions
Links 13/09/2026: Republican Campaign Aide Uses Nazi Photo and Convicted Felon is Wielding Power to Stifle Speech
Links for the day
Gemini Links 13/09/2026: Never Settling, Plain Text Digital Life, and Newsgroups
Links for the day
SLAPP Censorship - Part 182 Out of 200: UK Dockets With Machine-Generated Applications to the Court (From American Slop Companies)
Earlier this year Garrett was using machine-generated output as legal papers and submissions
Efforts to Cancel Matt Mullenweg Have Made Us More Sympathetic Towards Mullenweg and More Sceptical of the People Who Run Automattic (Named After Mullenweg)
Mullenweg, unlike Automattic, is not "in it for the money"
Boosters of Omarchy Are No 'Underdogs'
There are many Arch derivatives that do not rely on "viral" marketing in MElon's child porn-pushing social control media and are instead relying on real development, not slop
PIPs Are a Setup: They Set Workers Up to Fail While Working Their Arse Off Before Getting Kicked (Out) in the Arse
Malicious and exploitative
SLAPP Censorship - Part 181 Out of 200: This is Really More Like Brett Wilson LLP v Schestowitz (Using Money From American Slop Companies, Plagiarism Pushers)
We approach the parts where we explain that the Application to the Court with Garrett's name on it was instead complaining about fair criticism of the combative law firm (irrelevant to any injunctions) as if it was impermissible to explain what it had done - and still does - to my wife and I
It Sometimes Feels Like Slop Companies Are Committing Online/Digital Crimes
"GPT" out of control
Gemini Links 13/09/2026: Why Omarchy is "Plain Disgusting" and "AI Slop" and Why "Plain Text To Do List" Rocks
Links for the day
Links 13/09/2026: Scam Altman Admits Issues (Financial), Rival Says Stop Slop (Plagiarism)
Links for the day
Windows Down to New Lows as Switzerland's Federal Government Abandons Microsoft (Where Feasible for Now)
That's how it starts...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 12, 2026
IRC logs for Saturday, September 12, 2026