“See, as long as you can't prove that there are attacks on Windows XP we will not update.”