Operating systems and the vast majority of programmes do not begin their lives devoid of bugs. Applications have tens of thousands of bugs in them at any one time. It is common practise for software suppliers to give fixes for recognised software defects (also known as patches). Criminals often launch zero-day attacks the day after a newly discovered vulnerability is disclosed to the public. Nobody can dispute the immorality of what these criminals are doing, but a software firm has what duty to its customers if their inexperience or haste to compete in the market causes them harm? Users of computers are required to install the latest security updates.

Operating systems and the vast majority of programmes do not begin their lives devoid of bugs. Applications have tens of thousands of bugs in them at any one time. It is common practise for software suppliers to give fixes for recognised software defects (also known as patches). Criminals often launch zero-day attacks the day after a newly discovered vulnerability is disclosed to the public. Nobody can dispute the immorality of what these criminals are doing, but a software firm has what duty to its customers if their inexperience or haste to compete in the market causes them harm? Users of computers are required to install the latest security updates.