The Software Vendor CYA: Who's the Real Arse, Them or Us?

As more companies turn to the cloud, let's hope they don't keep making the same contractual mistakes they've made in the past.

to Applications |
Is it just me, or does it seem that high-tech companies are more desperate than ever to cover their asses—legally—than actually innovate and delight their customers?

For those not familiar with the "Cover Your Ass" (CYA) phenomenon, I once again turn to the Urban Dictionary for assistance: "Extraordinary precautions that are necessary in an overly litigious society." The example: Make sure you document everything just to CYA. Those attorneys are ruthless.

That the CYA mindset is so embedded in every product or service today is sickening. And the high-tech industry—software makers, in particular—can claim some of the worst offenders. Every little customer interaction has got to be lawyered up first. Fault should always lie with the customer!

The results of such a twisted approach can be stupefying. When's the last time you read—in its entirety—a Microsoft or Oracle software-licensing agreement? Facebook privacy page disclosure? iTunes e-commerce agreement? Ticketmaster's terms of service? An AT&T or Verizon Wireless contract before clicking "yes" and being legally bound to its terms?

Be honest.

If you answered "almost never," you're probably not alone. I couldn't find any survey data on that point, but the fact at how easily tech companies are able to get us to click on the "I Accept These Terms and Conditions" CYA buttons, and the proliferation of such buttons on the Web, leads me to believe that not many people are reading these agreements thoroughly.

Here's just one example: Microsoft's Information on Terms of Use. Nearly 5,000 words of "Get Out of Jail Free" written by Microsoft for you! There are a lot of hilarious passages in the text (no, not really), but here's my favorite:

IN NO EVENT SHALL MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF SOFTWARE, DOCUMENTS, PROVISION OF OR FAILURE TO PROVIDE SERVICES, OR INFORMATION AVAILABLE FROM THE SERVICES.

Or this gem from Adobe's Terms of Use page, 2,054 words strong: "You agree to defend, indemnify, and hold harmless Adobe, its officers, directors, employees and agents, from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal and accounting fees), arising out of (i) your violation of these Terms of Use, and/or (ii) violation of applicable law." (Its "agents"?? Whatever.)

I singled out Microsoft and Adobe, but this stuff is standard operating procedure in software and hardware circles these days, where quality and privacy "assurances" offer anything but. (For further fun reading, learn about Ticketmaster's "Terms of Service" case, on the Electronic Frontier Foundation site.)

Amy Konary, a research director at IDC who knows software pricing and licensing better than most, recently offered up this tweet: "Perusing licensing FAQs on various ISV Websites. Most are completely unreadable, even for someone that actually likes this stuff. Ick!"

But to solely blame the high-tech vendors and online service providers would be misplaced. Sure, the tech world has become a sea of NDAs, embargoes, confidentiality agreements and on and on, but some of that's attributable to the fact that we have all implicitly allowed that to happen without consequence. Online, we've already proffered our "Unconditional Surrender" to them long ago with our "I Agree" clicks.

Continue Reading

Print

Browse CIO Blogs

See all CIO Blogs »

Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.

Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy