Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

IBM is Already Doing 'Voluntary' Layoffs This Year in Europe ('Buyouts' Ahead of Mass Layoffs)
IBM's efforts to hide or belittle layoffs is noteworthy
Like GAFAM, US Telecom Industry Has Severe Debt Problem
Maybe their real problem is true profitability
Latest Example of False Marketing by Anthropic
Like Scam Altman, they're better at buying publicity (paying for hype) than they are at delivering something of genuine value [...] That has the full make-up of fake news and a publicity stunt
IBM: From RAs to "Workforce Re-balancing" (New Names for Mass Layoffs)
Well, "workforce re-balancing" means "RAs", which is a misleading acronym IBM has devised to soften if not hide mass layoffs.
Microsoft's Grip Has Slipped, Market Share Steadily Declining
This is why Microsoft is having financial issue
SLAPP Censorship - Part 60 Out of 200: Talking About Corruption at Microsoft and Arrest for Strangulation is "Malice"
At the moment Brett Wilson LLP has no new clients
 
Links 29/04/2026: "Snowden Affair 13 Years Later" and "Landmark Data Center Pause"
Links for the day
Seems Like Only Techrights Covered IBM Laying Off About 33% of Confluent Staff
How can such a large round of layoffs evade today's media?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, April 28, 2026
IRC logs for Tuesday, April 28, 2026
Gemini Links 29/04/2026: Bad Diet, New Middle Ages, and Temperature Model
Links for the day
Tracing Back the Misuse of the Word "Buyout" to Describe Merciless Mass Layoffs
So we can assume very large Microsoft layoffs are on the way, this time not spun as "buyouts"
Growing the List of Sites That Are Rogue
It's very important to raise and spread awareness of which ones are fake
Links 28/04/2026: Uganda Criminalising ‘Foreign Agents’ and China’s Economy "Starts to Show Cracks"
Links for the day
Anthropic and Claude Are National Security Risks Not Because of Politics But False Marketing and Vandalism, Plagiarism Sold as Innovation
The slop hype is causing severe damage
Gemini Links 28/04/2026: Misfin, ELPiS, and Developing Another Gemini Client
Links for the day
US Government Sites See More Traffic From Apple Devices Than Microsoft Windows PCs
Keep this in mind when Microsoft talks about mass layoffs while calling these "buyouts"
Layoffs Versus Buyouts
Microsoft has mass layoffs and those target the most experienced people in one of the best-paid locations
Aaron Hillel Swartz Would Have Turned 40 This Year
Aaron Swartz killed himself in 2013
The Trumps Are Making Jimmy Kimmel More Famous and Popular
Comedy has long been "controversial", but trying to get people sacked for the 'wrong' joke results in having no comedians or only pseudo-comedians who are the dictator's jester/joker
Links 28/04/2026: Microsoft's GitHub Upselling After Two Leaders Jumped Ship (Losses Pile Up), "Inflation Jumps," and More
Links for the day
The Corrupt Lecture the Non-Corrupt - Part VIII - "Red Line" When the European Patent Office (EPO) President Sleeps With Sister of "Cocaine Communication Manager" (Whom He Unconditionally Protects)
If only management took its own words (idealistic pontification) seriously
IBM Laying Off Thousands of Workers Again, Based on Q1 Earnings Call
under the guise of "workforce rebalancing" we are again seeing that IBM plans to pay people (severance) to leave
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 27, 2026
IRC logs for Monday, April 27, 2026
Gemini Links 28/04/2026: Good Sunrise Viewing and Self-hosting from Home
Links for the day[1;5C
Microsoft Insiders: If You Don't Take the Lousy Severance-Like Offer, They'll PIP You Out (Microsoft Signals to People Over 40 That They'd Better Vacate the Place)
Microsoft targets its most experienced (read: expensive) workers
"AI" 16 Times in One 'Article'. The Register MS Got Paid to Post This Spammy, Promotional Piece of Slop.
Pay closer attention to who pays and who gets paid
Links 27/04/2026: Chernobyl Disaster at 40, "Heartbreaking" Decline of Australia
Links for the day
Gemini Links 27/04/2026: Gopher Catchup, MNT Reform, and Injuries
Links for the day
Red Hat Circling Down the Slop Drain
IBM, governed by slop fanatics, is going to do a lot of damage
Slop is an Addiction, Its Users Find It Addictive
please do not tolerate people who slop
The Corrupt Lecture the Non-Corrupt - Part VII - Secrecy at the EPO (Regarding Cocaine and Nepotism) Has Undermined Trust in Management
If Europe's second-largest institution is run by the "Alicante Mafia", does this mean that other key European institutions are "Mafia"?
SLAPP Censorship - Part 59 Out of 200: Mentioning the Fact Alex Graveley Arrested and Charged for Strangulation in Texas is "Reckless" and "Malicious", According to His 'Hired Guns' in London
it was framed as "malicious"
Links 27/04/2026: Strikes, Corruption in Spain (Spanish PM Sanchez' Wife), and YouTuber Faces Jail Time
Links for the day
Gemini Links 27/04/2026: Gopher Catch-up, Year of Contentment, and Path to Freedom
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 26, 2026
IRC logs for Sunday, April 26, 2026