> the customer can run, patch, and run as patched, but not share with others.
> the seller guarantees the software will work as documented, won’t be infected with malware, won’t be riddled with security holes, won’t contain plagiarized code.
The two points together are dangerous: they make the seller commit that the software works as intended, even if it is patched by the customer.
The second point is also terrible for the seller: it creates an unbounded liability in case of bug or security issues. Let's assumme that a security vulnerability is discovered, the seller is liable for its exploitation even if they released a patched version that the customer has not applied.
The two points together are dangerous: they make the seller commit that the software works as intended, even if it is patched by the customer.
The second point is also terrible for the seller: it creates an unbounded liability in case of bug or security issues. Let's assumme that a security vulnerability is discovered, the seller is liable for its exploitation even if they released a patched version that the customer has not applied.