Microsoft researcher discovered access control list bug.
Regulator saw only 'some benefits' in the arrangement.
In as little as one year, if new pricing model passes.
Software vendors have up to 24 months to make changes.
As industry demands compensation for software development costs it incurred.
Settles in exchange for discount.
Former executives questioned.
As the company struggles to demonstrate value.