> Some form of built in software expiry might be necessary one day forcing a client to upgrade

That is absolutely stupid. The ISPs should be the only line of defense required to combat this. Your machine gets infected and starts attacking other machines? Guess what, you are booted off the network (violation of terms of service). You want back on? Prove that you fixed your security problem.

I should not be forced to upgrade my software if the manner in which I use it does not pose a threat to anyone.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/217/24860#24860