Re: A different question
Very true. I am a bit disappointed that none of the finger pointing has looked at the NSA/GCHQ.
The whole question about what level of support vendors should provide is a very difficult one. I remember invoking a DR contract when a SparcServer 1000 finally gave up the ghost 20 odd years after it was bought and SUN said they didn't have any spare parts. It had Solaris 2.5.1 which had not been patched in aeons of course. I should imagine that there were any number of security holes but somehow it didn't matter in those halcyon days of the early/mid 2000s.