Bonum Certa Men Certa

Microsoft Breaks the Law by Not Patching Windows as Per the Agreement

Balance



Summary: Microsoft's legal obligations are hanging in the balance while Windows 2000 does not receive security patches

ABOUT a month ago we showed that Microsoft broke its contract with the customers by refusing to patch Windows XP. As it turns out, Microsoft is doing this with Windows 2000 as well.



Our reader Ryan, who is a former Microsoft MVP and an expert in this area, wrote in IRC: "You should drive home a point that you aren't when talking about Conficker and its brethren. Windows 2000 will be TEN YEARS OLD on February 17, 2010, and still manages to get at least a dozen security patches a month, even now. It's a good way to point out that no matter how many patches you install, there's always more vulnerabilities. Several thousand of them have been patched in Windows 2000 and it's still regularly patched. You would think that the patch rate would have slowed down and the OS would have more or less settled by now, but it's going to be patched from birth to abortion. You should also mention that companies won't necessarily throw out Windows 2000 on their systems just because it's out of support. From Wikipedia: 'On 8 September 2009, Microsoft skipped patching two of the five security flaws that were addressed in the monthly security update, saying that patching one of the critical security flaws was "infeasible".[93] According to the Microsoft Security Bulletin MS09-048, "The architecture to properly support TCP/IP protection does not exist on Microsoft Windows 2000 systems, making it infeasible to build the fix for Microsoft Windows 2000 Service Pack 4 to eliminate the vulnerability. To do so would require rearchitecting a very significant amount of the Microsoft Windows 2000 Service Pack 4 operating system, [...] there would be no assurance that applications designed to run on Microsoft Windows 2000 Service Pack 4 would continue to operate on the updated system."' Windows 2000 not only shares all the vulnerabilities in XP, Microsoft has started refusing to patch some while the damned thing is still supported (to try and force an upgrade). It's not the first time that Microsoft has refused a security patch for operating systems still in support, they left some critical Windows 98 and Windows NT 4 vulnerabilities unpatched, with a year left on the support lifecycle.

“In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license.”
      --Ryan
"Windows 2000 is supported until July of 2010, meaning that per their support agreement, every security patch should be delivered on until then, so they're violating their own support agreement, but insisting that you obey your obligations under their EULA. This is kind of like the times Microsoft was found violating their side of the privacy agreement in Windows Media Player 7 (they probably still do). In other words, Microsoft can flagrantly violate the hell out of their side of the agreement, but don't you dare to step out of line or install Windows on two systems with one license."

Fewa responds with: "Microsoft has always been an outlaw corporation. They only obey the laws that benefit them and disregard those that would dare limit their greed of monopoly. They even wish to impose on other those laws. It's not just that; of course having the government totally hijacked for 6 years did not help. The democrats got a majority in 2006 (in the house)."

"8 years," insists Ryan, "and I'd argue that they still do. Obama has packed the DOJ with more RIAA mafia types." Here is a collection of references.

Ryan is not optimistic. "They're one of the richest companies and have hundreds of lawyers," he says. "You could sue them, in theory, but they could just stall forever."

To summarise, writes Ryan: "What kind of confuses me is that according to Microsoft, breaking their EULA is "illegal", but when they break their side of the agreement it's OK as long as they can say "It would have been too much work to close that critical patch on Windows 2000." It would be like me saying "Well, I installed the same copy of Windows on ten computers cause it would have been too much of a strain on my finances to buy 9 more licenses"; Same defense they're trying, too much of a strain on limited resources, so it's OK to break the agreement."

In other news, Microsoft's cryptology is broken again.

Microsoft releases fix for crypto patch



[...]

The ocsasnfix.exe (direct download) program is to fix the glitch both in the client and in the server. In a knowledgebase article, Microsoft describes how to run the program and what other actions may need to be taken.


Perhaps Microsoft could not just disable the features this time around [1, 2].

Comments

Recent Techrights' Posts

How Many Web Requests From "Linux"...
If one was to assert that "Linux == Android" or "Android == Linux" (it's not that simple), then "Linux" already accounts for about 30% of Web requests
Microsoft Trots Out Its Propaganda Agent Preston Gralla to Make It Sound Like Microsoft Breaks Up With China (Reality: Microsoft Got Dumped by China)
This discredits any publisher that plays along
 
Analogue So Much Better and Faster
From what we can gather, the tram ticketing system does not use Windows; we never saw it crashing or rebooting (or showing some Windows logo) in decades, so we assume it runs some kind of Linux
Linux Today Dumped All Social Control Media Last December
Linux Today seems to have concluded that all Social Control Media is just a waste of time
Don't Say X.com is OK Because People Can Access It by Alternative Means
Can Mozilla please clarify who inside Mozilla greenlit a return to X.com?
The Reach of techrights.org Is Increasing
We are on the side of women victims
SLAPP Censorship - Part 162 Out of 200: An Outline of Events
An outline of events
Pushed to Live
We still have some other work - stuff related to the editing of pages - which is work in progress and has been subjected to testing for many months
GNU/Linux Measured at 10% in Germany, Based on Cloudflare
It's peaking late at night
Richard Stallman's GNU Project Began 42 Years Ago With GNU Emacs and More
GNU Project announced almost 43 years ago (next month it's the anniversary)
Fake Articles "Sponsored by HPE" Published in The Register MS
Selling proprietary products as 'alternatives' to other proprietary products
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, August 25, 2026
IRC logs for Tuesday, August 25, 2026
Gemini Links 26/08/2026: Journal Plans and Extending Finger Protocol
Links for the day
An Explainer About Injunctions Done Wrong - Part I - Saving Money Where Money Cannot be Saved
Of course Garrett not being able to afford his own case is a key factor here
Links 25/08/2026: "U.S. Marines Cancel Drill With South Korea", "UK Prime Minister Burnham Arrives in Ukraine"
Links for the day
Not for the First Time This Week, Site Called "It's FOSS" is Promoting Software That is NOT FOSS (And It Knows It)
Is this an editorial choice? Advertising? What is it?
Gemini Links 25/08/2026: Geometry and FidoNet History, "Goodbye I2P and Yggdrasil, Welcome Telnet!"
Links for the day
Links 25/08/2026: Microsoft Salaries Leaked Again, "Oasis Photograph Sparks Copyright Lawsuit"
Links for the day
GNU/Linux Did Not Start in 1991 and America Wasn't Discovered by Europeans
it'll be 43 next month
SLAPP Censorship - Part 161 Out of 200: Low Standards in Defamation Cases Just Muddy the Waters and Distract From Legitimate Cases
The judge at the trial said that Garrett's case was a waste of the court's money
Rolling Out Some Changes Soon
To the regular reader no change will be seen
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, August 24, 2026
IRC logs for Monday, August 24, 2026
Gemini Links 25/08/2026: Separated by Plexiglass, Low-Tech Information Networks, Jörg Rippel Comes to Geminispace
Links for the day
The Tragedy of Software Developers Making Up Narratives and Making Excuses for Plagiarism (of Their Own Work, Too)
one lingering issue is that many who vote in Debian GRs receive money from slop companies
Evri Makes Us Optimistic About the Collapse of the Slop Pyramid Scheme (Bubble)
Do not be seduced by false promises of "automation" or "intelligence" where only automation may exist but no intelligence at all
Congrats to Linux.org for Adopting or Getting Back to IRC
This is the way the Net ought to work and was originally designed to work [...] IRC as a protocol turns 38 this month
Links 24/08/2026: "Journalism Can Help Expose Bad Science And Trigger Real-World Change"; Further Suppression and Censorship in China/HK
Links for the day
Gemini Links 24/08/2026: Soul Mentality, Words to Live by, Mozz.us Gemlog Resumes, Smol Conversations
Links for the day
Today The Register MS Published Greenwashing Spam for the Slop Pyramid Scheme, It Mentions "AI" 29 Times
More people need to talk about the role of the media in this pyramid scheme
Slop Plagiarism and Chatbots Are Killing Evri (They Infuriate and Insult Clients)
Slop destroys companies and leads to misery (miserable clients, time-wasting)
Links 24/08/2026: Re-defining the IndieWeb and "Data Center Backlash Bursts Into the Midterms"
Links for the day
The Issue With Omarchy is the Slop, the Politics Are a Side Issue
Those corporations do not oppose slop, they participate in it
In South Korea, Steady Increases for GNU/Linux
authorities said they would migrate to GNU/Linux or consider moving in that direction
SLAPP Censorship - Part 160 Out of 200: In Astounding Repetition of Last Year, Brett Wilson LLP Deliberately Ignores Holidays of People It is Attacking and Crushes Principles of Access to Justice
Disconnected from the law
Links 24/08/2026: Vision and Skill, Doing Good, Chiperia Project
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 23, 2026
IRC logs for Sunday, August 23, 2026