102

Should OS makers, like Microsoft, be legally required to provide 15 years of security updates?

all 18 comments
sorted by: hot top controversial new old
[-] Petter1@discuss.tchncs.de 27 points 2 hours ago* (last edited 2 hours ago)

I would prefer if they force the companies to unlock root and boot-loader, when they not ship security updates anymore for a device.

[-] WhatAmLemmy@lemmy.world 5 points 14 minutes ago* (last edited 12 minutes ago)

Fuck it. Force them from release date. There's no reason for them to dictate what you can and cannot run on the hardware you purchase. If they can't compete by providing a better OS or software, and must rely on anti-competitive models to profit, then they don't deserve to waste the planets resources.

[-] TankovayaDiviziya@lemmy.world 5 points 1 hour ago

Nothing says ‘circular economy’ like Microsoft stranding 400 million PCs

This might be a silly question but would this not be a good idea for a start up company that recycle computer parts?

[-] vacuumflower@lemmy.sdf.org 6 points 1 hour ago

Of course. Make another regulation only big corps can follow. To punish them, of course. This is punishment.

[-] panda_abyss@lemmy.ca 13 points 2 hours ago

This is stupid.

15 years is a massive time to just update your OS.

15 years ago instagram didn’t exist, the iPad was new, and people were just updating from Vista to Windows 7. I think Hadoop was just created then.

That is a massive amount of time to support software that would have almost no architectural protection against things like heartbleed.

[-] Buffalox@lemmy.world 9 points 2 hours ago* (last edited 2 hours ago)

"Microsoft's decision to end support for Windows 10 could make 400 million computers obsolete

This is more stupid, and I absolutely agree with the article it shouldn't be legal to end support of an OS this quickly, mind you this is not update to a new OS, like is common on phones, but mostly security updates for the OS you purchased with the device.
I absolutely think 10 years should be a minimum, but for PC, I can easily see an argument for 15 years, as many systems are purpose built, and should keep working even if an OS is discontinued.

A similar argument can be made for phones, but maybe that should just be 10 or maybe even just 5 years, which very few phones have. My vote is on 10 years, because what some companies have been doing for a long time, only supporting security updates for 3 years is not acceptable IMO. If the phone is free to install custom ROM unhindered, I would be more understanding, but phones are generally locked, potentially rendering them worthless if updates are not available.

[-] JustARaccoon@lemmy.world 1 points 21 minutes ago

I think I'd prefer if there was a minimum updates guarantee that OS sellers would have to disclose, but even then I'm more in favour of other companies being able to pick up the work by making sure devices have their bootloader unlockable after they don't get any more updates for X amount of time, rather than add burden to OS makers, because forcing people to support a project for Y amount of years would really harm indie developers releasing Linux distros and the like

[-] ramble81@lemmy.zip 1 points 56 minutes ago

And yet people are bitching because Windows 10 is getting cut off after 10 years of support. Raise it to 15 and people will just bitch at the 15 year mark.

[-] krebssteven@lemmy.world 15 points 2 hours ago

What we REALLY need is to curb microsoft’s market dominance. If more alternatives for OS and usable replacements for MS office em would exist, this would not be a problem and would not need to hamper innovation for the sake of back porting (the main counter-argument as a dev).

[-] elucubra@sopuli.xyz 2 points 19 minutes ago

Linux and all its flavors?

What’s wrong with libreoffice or anyoffice? For a large percentage of users, Linux is fine, especially as many applications have an online option. For the stuff I do, in Linux, online Office is more than sufficient.

An org I work with provides me with a 365 license, but I I’m more comfortable in Libreoffice.

Office is used bythe majority, but majority doesn’t mean they are right, they are simply more.

[-] IHeartBadCode@fedia.io 3 points 1 hour ago

European e-waste campaigners are calling on EU leadership to force tech vendors to provide 15 years of software updates, using Microsoft's plan to end Windows 10 support next month — which may make an estimated 400 million PCs obsolete — as a textbook case of avoidable e-waste.

Windows 10 has already had 10 years of support. ESU extends this one extra year. If you have hardware that cannot meet Windows 11's requirements, there are other OSes available that will happily run on that hardware. Which is what brings us to the real issue.

Microsoft's near monopoly on consumer grade PCs and Apple's vendor lock in. This is the core issue.

Companies can do this because there are no regulations to stop them. We call on European Commissioner Jessika Roswall to introduce EU Ecodesign requirements for laptops, guaranteeing at least 15 years of software updates. No more devices designed to break or become obsolete before their time

Ten years is a very long time for support. If you need support past that length, you need a different OS. Apple does good to keep Macs made in the last five to seven years still able to run their newest OS. They are some of the worse offenders on this. But even with a different OS, there's still a limit to how far you can take hardware. You could put the best optimized software on really old hardware and that won't change that the underlying CPU is old.

The older hardware gets the harder it is to keep supporting it. Case in point, there reason you can't get TLS 1.2 that pretty much every site now requires onto Windows 95 era machine is the underlying hardware cannot keep up with the required computational needs to support that encryption. And if you happened to install Windows 95 onto modern hardware, the number of changes to the OS to get access to the underlying hardware is pretty much an upgrade to Windows 7.

Ten year old machines are doing alright for the time being, but we have to move on. TLS 1.3 is here, has been here since 2018. The stricter requirements for security, require more advanced hardware.

And I just mention TLS as a single example of what we're talking about here. Modern hardware advances and attackers and users get those at the same time. While software security schemes do ensure security long after the hardware has become dated, there's a point where it won't matter anymore what software you toss onto the machine. It's just so out dated it doesn't matter, no software is securing it. Now that's usually a lot longer than ten years, but it's not much longer.

You can take a very lightweight Linux distro and pop it onto a Pentium 3 machine. It will technically run. But you are lacking SSE2 and even if you recompiled to remove SSE2 optimizations and strictly held to 586 ISA, you're not going to enjoy the performance on the machine. For even the most simple tasks like unpacking a 7-zip. You will fare very unwell to some attacker who has a modern Threadripper machine.

I love old machines but the rest of the world is moving forward. Yes, software could technically cover for more than ten years, but not much more. But it's silly to think that a Athlon 64 (2003), the oldest CPU you can technically get working on Windows 10 because of the NX bit requirement, would be able to keep pace on today's multi megabyte sized website. Hell even the X2 models that were the first to be "dual core" would have issues with how modern web browsers handle things because Athlon 64 X2's model for multiple processors is vastly different than how modern CPUs do it. It wouldn't take anything for someone to feed it a website that would bring the system to it's knees.

The thing is 15 years a very long time in the world of technology that's ever evolving. Software can only go so far. 15 years is absolutely you need a different OS if that's your requirement territory. But when you start hitting 20 years, your going to see breakage no matter what software you throw at it. It might be very slight at the 20 year mark. but each year after that it's going to become more pronounced.

[-] freeman@feddit.org 9 points 2 hours ago

What would that mean for Linux distros? It seems like it could be a law that cuts off the competition. Like amazon who is very selectively for better working conditions when the know that no competitior can fulfull them.

[-] Buffalox@lemmy.world 4 points 1 hour ago

I think it would need to be a commercial product like Red Hat or preinstalled OS by the company that sell the computer.
With a FOSS distribution that is made freely available without charge, that people download and install themselves, people are probably themselves responsible for their choice of OS.

[-] ieatpwns@lemmy.world 10 points 2 hours ago

Would Linux even count since it’s foss?

[-] Buffalox@lemmy.world 6 points 1 hour ago

I think it does in some cases, like if you buy a System 76 computer with PopOS, or you buy a server with Red Hat.
However if you install a Linux OS yourself, that is available free of charge, there isn't any money to claim back, and it would be illogical if there should be demands on updates.

I think logically there needs to be money involved, so if you download PopOS you're on your own, but if you bought a computer with PopOS installed it is part of a package.

I'm not a lawyer, but from my experience this is how things typically work.

[-] tabular@lemmy.world 4 points 2 hours ago

Microsoft is so wealthy they could do that, and would even support such legislation if it could hinder their competitors such as smaller Linux distributions.

[-] bluGill@fedia.io 3 points 2 hours ago

Lifetime for security. Other features (new drivers...) you can pay for, but security is lifetime. You need to escrow enough money to provide this service or prove that nobody is using the OS.

All services required for use of the device are also lifetime - though they may charge a subscription price so long as that price is clear to the customer before the first sale and prices go up by inflation only. After 15 years they can drop the service if it is easy for a "normal user" to switch to a different subscription provider; and all source code required for someone "skilled in the art" to create and maintain their own service provider is publicly released under terms that allow modification and redistribution was released at least 5 years before killing their own service.

You are allowed to drop support for any protocol that is not latest recommended state of the art so long as you maintain what was recommended at time of release. If a newer protocol comes out you need not support it. (Which is to say you can be IPv6 only today, and if the internet switches to IPv12 in the future you don't have to support that)

The above applies to anything network connected. OS, web browser, Security camera, thermostat....

this post was submitted on 17 Sep 2025
102 points (100.0% liked)

Technology

75191 readers
2682 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS