> -----Original Message-----
> From: Ronish Mehta [mailto:[EMAIL PROTECTED]
> Sent: Monday, July 21, 2003 10:19 AM
> To: [EMAIL PROTECTED]
> Subject: Microsot Liability for vulnerabilities       

> Hi all,
> As we all know, M$ licences are very expensive (both
> one-time & recurring cost).

Try getting ORACLE licenses.  Then complain about price <g>

> We also know that new vulnerabilities are discovered
> regularly (we may say monthly just to be kind)

And more so with Windoze than with Unix, nonetheless. . .

> These vulnerabilities are exploited by viruses and
> hackers, and these may cause damage to our computer
> systems, and may involve additional cost

Are not the hackers and virus-writers ultimately liable, assuming they can be 
identified and caught ???

> to protect ourselves against these threats, we have to
> apply latest patches, use uptodate antiviruses.

In other words, good Systems Administration and Network Security practices

> In a large organisation deploying patches may be a
> real headache (I know because I'm in this situation ;)
> and may involve additional cost

Patching is part of ANY system. . .

> I was just wondering if Microsoft does not have a part
> of responsibility in all this? After all we are paying
> this company a fortune for OS and applications that
> contain vulnerabilities/bugs.

Of course they do.  And by agreeing to the EULA, you waive all liability. . .

> Should we continue to pay Microsoft for its buggy
> software packages? Can we sue it for the damages that
> it can potentially cause to our company (interms of
> cost, reputation, etc)?

1.  Feel free to migrate to Linux or any of the *nixes.  Your real problem is at the 
desktop: too many users would freak at a KDE or GNOME desktop, and without their 
buggy-but-familiar Word, Excel, Powerpoint, and Outlook. . .

2. No, you can't sue: you agreed they were not liable in the click-through AND when 
you opened the wrapper/envelope on the media. . .



---------------------------------------------------------------------------
----------------------------------------------------------------------------

Reply via email to