On Wed, 14 Jun 2007, John Levine wrote:
But ISPs are not wholly without responsibility. If one of your customers reloaded Windows from CD and then needed to download all of the patches, do you provide a way for them to do it without getting re-wormed before the download is done?
Windows patches and updates are copyrighted intellectual property of Microsoft, and can not be re-distributed without written permission of Microsoft. Microsoft currently does not have an authorized way for general public ISPs to redistribute Microsoft updates except by a connection to the Internet. Institutional licenses, such as available for universities, are not licensed to ISPs. Since many Microsoft patches are only legally available via the Internet, and an ISP can not predict which servers Microsoft will use to distribute Microsoft patches, ISPs must enable essentially full Internet access which includes access for most worms. I have been down this road several times with Microsoft legal. And if an ISP wants to obey the law, there isn't a good answer for ISPs. If the ISP says to hell with the law, there are several technical options for redistributing Microsoft updates. If Microsoft changed its licensing policies for ISPs, there are several technical options for redistributing Microsoft updates.