Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

IRC is for Communities, Social Control Networks Are for Broligarchs (by Broligarchs)
Unlike Reddit, it's not a company
Intercontinental Brigading - Part XXXXVI - Attempts to Kill Critics
"Epstein contacted Cambridge academics about research funding"
NVIDIA Down About 30% in 5 Weeks, When Does the Media Call It "Bubble" Rather Than Frame It as Sex Scandal?
they'll find a way to blame "China"
 
Links 11/11/2026: Skydance Games and Boeing Hit By Layoffs, "Time Out for Timeouts"
Links for the day
JavaScript is the Problem, Not the Answer
Making the Web better is about making things better, not slapping more JavaScript 'walls' at it
Intercontinental Brigading - Part XXXXVII - "Making a False Complaint to Police is a Crime." (British Cops Aren't American Mercenaries)
"In the United Kingdom, the Foreign Enlistment Act 1819 and the Foreign Enlistment Act 1870 make it unlawful for British subjects to join the armed forces of any state warring with another state at peace with Britain."
The Label 'Anti-AI'
They make it sound like opposing plagiarism or cheating is an act of intolerance or hatred
Intolerance and Violence
Intolerance in the software world is not a new problem
António Campinos Hiding From Staff Amid Strikes, Won't Participate in Dialogue
They voted to continue striking until Christmas
Silent Layoffs at IBM (Rolling Layoffs), Now Curbs on H1B (Mostly Indian Applicants)
Little will change at IBM except the gravity (global distribution) of its workforce will go east
Links 11/11/2026: Moving from Proton to Posteo and "Floating in Space"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, November 10, 2026
IRC logs for Tuesday, November 10, 2026
Gemini Links 10/11/2026: Running, Tektronix, and "Smallnet Information Services Zig Port"
Links for the day
Corporations Don't Lose 2 Trillion Dollars in 'Value' Over a 'Dick Story', This is an Overvaluation and Belated Correction
Nvidia is down, down, down again
Links 10/11/2026: "50 Years of Project Censored" and NVIDIA's Collapse Continues
Links for the day
Surreal Times
NVIDIA's shares fell 27% in 5 weeks
Links 10/11/2026: "Jensen Huang Could Face $81 Billion Divorce Bill" and "Nvidia Shareholders sue Jensen Huang"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, November 09, 2026
IRC logs for Monday, November 09, 2026
Gemini Links 10/11/2026: Open Problem in Computer Science Due to Bloat and "Queueing Nine Hours for an iPhone"
Links for the day
“Losing Huang Would Introduce a Lot of Uncertainty"
Huang won't last much longer
GNU/Linux Rose to 6% as Laptop/Desktop Operating System in Azerbaijan
In the past two weeks the average measure as seen by Clownflare is 5.7%
Intercontinental Brigading - Part XXXXV - The Brand (and Reputation)
"Russell Brand sentenced to 10 years and six months for rape and sexual assault"
Microsoft Will Pay $11,742 USD for Workers to Leave
11 lakh Indian Rupees
Since Records Began 18 Months Ago, statCounter Saw Chatbot Usage Falling Sharply
Chatbots are not becoming more popular and the commercial world is having second thoughts
Losing Their 'Faith' in Slop
Are leather jackets becoming a "signal" of "cheating on the wife"?
Protestants at the EPO Fight On, Rising in Opposition to and Against Corruption, Also Against GAFAM
Don't say we didn't warn you...
Boosters of Non-reciprocal Licensing Are Just Trying to Cancel Richard Stallman (RMS) and His Baby, GNU
If only they liked freedom as much as they love Microsoft (or Microsoft's GitHub, which is proprietary and unsafe)
Gemini Links 09/11/2026: Zephyr, Wireless Planet, and Old E-mail
Links for the day
IBM: From Illegal NDAs to Illegal Secret Settlements (Money in Exchange for Promise Not to Sue)
Insiders also explain why RAs may come weeks from now [...] IBM has marked 40,000 workers it wishes to get rid of
When Some Footage Causes Your 'Company' to Lose Almost Half a Trillion Dollars in 'Value' in a Few Minutes Your Company is Fictionally Valued
stock slips 8% because the CEO cheats on the wife
Links 09/11/2026: 'Humanitarian' Putin Knocks 600,000 Civilians Off the Grid, Eminem’s Publisher Sues Suno
Links for the day
Like Crooked Politicians, The Register MS is Selling "Dinners" (Access, Sponsors)
Talk about "hey hi".
The Register MS is Not Objective Regarding "AI", It's Paid by Pushers of the Pyramid Scheme (including Nvidia)
Some time soon we'll name some companies that pay millions to The Register MS in order to cement their role in the house of cards (while it lasts)
GAFAM Moribund
A lot of what we say about Microsoft in respect to debt is equally applicable to the rest of GAFAM
NVIDIA as a Scam Company Run by Scammers Who Fake Demand for Their Waste of Energy (Subsidising GPU Sales for Use Cases That Don't Exist)
First they targeted gamers, then fake 'currencies' (which turned out to be a bust), now it's slop (obfuscation of plagiarism using brute force and fusion) [...] We're quite glad that Huang publicly broadcasts how untrustworthy he is
Links 09/11/2026: Nvidia CEO Jensen Huang Cheats on Wife With A Suspected Chinese Spy, "400,000 Russians Killed in Battle Since 2022 Invasion"
Links for the day
Zero Tolerance for Slop
very few sites that dabbled in slop ended up well off (for it)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, November 08, 2026
IRC logs for Sunday, November 08, 2026
Gemini Links 09/11/2026: "The Blue Wave Won't Save Us" and "Discoverability Is Only Solved If You Can Be Discovered"
Links for the day