Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

It Has Cost $215,000 in Legal Costs to Sue IBM for Wrongful Termination
IBM typically settles out of court and demands secrecy (to avoid anyone else benefiting from the very expensive outcome)
The PIPs or 'Voluntary Termination Offers' Help IBM Fake Its Situation
"IBM is not a tech company"
 
SLAPP Censorship - Part 184 Out of 200: A Tiny Law Firm That Knows Nothing But Microsoft (But Merely Pretends to Understand "IT")
They've managed to trick some mainstream media into thinking they're "Tech" experts or "Social [Control] Media" gurus; nothing could be further from the truth
Links 15/09/2026: Sweden’s Far Right Perishing and "Iceland Just Got Played"
Links for the day
It's Not About How Developers Vote
This isn't about politics, it's about users being in control of their own computers and computing
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 14, 2026
IRC logs for Monday, September 14, 2026
Gemini Links 15/09/2026: Poetry, Enshittification of Ebay, and Mecha System
Links for the day
LG Lies to Cover Up Lies About Its Spying TVs (It Records and Transmits Conversations in Rooms)
This is what a lot of "modern" technology is like
Oracle's Debt Continues to Soar (Increase of 60 Billion Dollars in 15 Months, Not Counting the Secret Debt, With Off-balance-sheet Debt Having "Grown Roughly Thirtyfold in Four Years")
Oracle debt continues to grow
Apple's iOS and macOS Measured as Bigger Than Windows in the US, Linux-Based OSes at Almost 30%
Expect the silent layoffs at Microsoft to continue at a rapid pace
Oracle, Like Microsoft, Drowns in Debt and Discards Tens of Thousands of Staff (Microsoft Does the Same More Discreetly)
The main difference between Microsoft and Oracle is that the latter is honest about what's going on
Gemini Links 14/09/2026: First Android Phone, Leaving Sony, and Rant About Gemini-to-HTTP Proxy Providers
Links for the day
Links 14/09/2026: "Scam Altman Now Trying to Gain Control of Electric Grid" and Sweden Moving to the Right
Links for the day
Vista 11 Flunked
Microsoft cannot start a "Vista 12" campaign as it would only make matters worse
Microsoft Urgently Needs Distraction: There's No "Next XBox", But There's a New Boot Screen (Like 'Dark Mode', a Feature That Can be Implemented in Mere Minutes/Hours)
Anything to distract from XBox fiasco
IBM Flying Away to Sweatshops (So Will Red Hat)
Even on Sunday people post about 'leaving' IBM
RFID Ambitions Already Established by Widespread Skinnerbox Adoption
A society that cannot maintain privacy for those who deserve it will not manage to assure dignity of citizens
SLAPP Censorship - Part 183 Out of 200: What Actually Happened Two Months Ago (Based on People Who Attended)
It's dangerous to assert what happened in a hearing you did not attend (there was no video stream or recording, either)
Phil Harvey, an Editor-in-Chief in a B2B Site, Explains Why ChannelFutures (Connected to TechTarget) and Other Sites That Used to Cover Linux Deleted Many Articles
Every old article in channelfutures is gone!
Software Freedom Day 2026 is 5 Days From Now, Fresh Reminder to Boycott Proprietary Software
Let this be a timely reminder of why people should avoid proprietary software
Links 14/09/2026: Slop Hardly Used for Actual Work (Chatbots Are for Lonely People), Slop Bots (Scrapers, Plagiarism) "Are Thirsty for Power"
Links for the day
Gemini Links 14/09/2026: Trip, Hiding, and OCR
Links for the day
IBM PIPs Are Layoffs (RAs Come Later Even If You Satisfy the "Performance" and "Plan")
Notice how "the media" almost never mentions silent layoffs, as if just because they're silent, there's nothing to investigate, nothing to see there
Slop Companies Engage in Plagiarising the Web, Now They Pay People to Contaminate the Web With Their Lies
Remember that the lawfare against us is funded by slop salaries!
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 13, 2026
IRC logs for Sunday, September 13, 2026
Microsoft is Laying Off All Year Long (It's Just Keeping Quiet About It)
The issue here is also the media. It's complicit.
MElon's Twitter Takeover Was Meant to Amplify People Like Himself or David Heinemeier Hansson (Slop Pyramid Schemes and Bigotry)
Social control media is not neutral
Microsoft Lunduke of 'Linux Sucks' (and Microsoft Corp.) Tries to Replace GNU/Linux With Toxic Discussions About Toxic Politics
Poisoning the well people drink from
General Assembly Covers EPO Strikes on Thursday, September 17th (2026)
The EPO's staff representation at The Hague has asked people to join an upcoming online session about industrial actions
Links 13/09/2026: Republican Campaign Aide Uses Nazi Photo and Convicted Felon is Wielding Power to Stifle Speech
Links for the day
Gemini Links 13/09/2026: Never Settling, Plain Text Digital Life, and Newsgroups
Links for the day
SLAPP Censorship - Part 182 Out of 200: UK Dockets With Machine-Generated Applications to the Court (From American Slop Companies)
Earlier this year Garrett was using machine-generated output as legal papers and submissions
Efforts to Cancel Matt Mullenweg Have Made Us More Sympathetic Towards Mullenweg and More Sceptical of the People Who Run Automattic (Named After Mullenweg)
Mullenweg, unlike Automattic, is not "in it for the money"
Boosters of Omarchy Are No 'Underdogs'
There are many Arch derivatives that do not rely on "viral" marketing in MElon's child porn-pushing social control media and are instead relying on real development, not slop
PIPs Are a Setup: They Set Workers Up to Fail While Working Their Arse Off Before Getting Kicked (Out) in the Arse
Malicious and exploitative
SLAPP Censorship - Part 181 Out of 200: This is Really More Like Brett Wilson LLP v Schestowitz (Using Money From American Slop Companies, Plagiarism Pushers)
We approach the parts where we explain that the Application to the Court with Garrett's name on it was instead complaining about fair criticism of the combative law firm (irrelevant to any injunctions) as if it was impermissible to explain what it had done - and still does - to my wife and I
It Sometimes Feels Like Slop Companies Are Committing Online/Digital Crimes
"GPT" out of control
Gemini Links 13/09/2026: Why Omarchy is "Plain Disgusting" and "AI Slop" and Why "Plain Text To Do List" Rocks
Links for the day
Links 13/09/2026: Scam Altman Admits Issues (Financial), Rival Says Stop Slop (Plagiarism)
Links for the day
Windows Down to New Lows as Switzerland's Federal Government Abandons Microsoft (Where Feasible for Now)
That's how it starts...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 12, 2026
IRC logs for Saturday, September 12, 2026