Much of our infrastructure runs on old computers. That's not necessarily bad. Assuming there's no network connection, configs are left unchanged, and updates ar

Much of our infrastructure runs on old computers. That's not necessarily bad. Assuming there's no network connection, configs are left unchanged, and updates are not installed, neither bitrot nor vulnerabilities will bring down the system. A hardware failure could, if compatible replacements aren't available. The latter does occur. Part of the reason for keeping these old systems is the risk in upgrading. The software has been in service for years so it's relatively battle-tested. New software comes with the risk of bugs and deployment problems. Bugs and deployment problems can mean lengthy shutdowns of critical infrastructure (if it proves impossible to bring the old system back into service as an emergency measure). So there is some wisdom in letting the old systems clunk along. Up to a point, that is.