Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Richard Stallman's Experiences With 'Cancel Brigades' Ought to Educate Linus Torvalds
Now they talk about "if Linus dies" scenarios
XBox Consoles Nearly Dead by Now, the 'XBox' (ex-Box) Brand Now Stands for Something Full of Slop, Spam, Filler, and Chaff
We're seeing the last day (maybe year) of "XBox"
 
For the EPO to Survive, António Campinos and the "Alicante Mafia" Must Fall on Their Sword
There are EPO insiders who are convinced Campinos too is (or was) a cocaine addict
Some Slopfarms and Some Real News Sites Cover Richard Stallman’s (RMS) Talk
If his message about Software Freedom spreads, then we're all better off
Gemini Links 26/01/2026: Pocket Power Pack, Batteries, and Breaks
Links for the day
"Microsoft Vista 11 Emergency Update" as Windows Fails to Boot (Again)
Microsoft is desperately trying to find some new business model as the debt soars
4 Hours Ago The Register MS Published Paid-for Spam About "AI" (Slop, Buzzwords)
"AI" mentioned 13 times in the page
IBM 'Results' Due Wednesday Evening, Expect Clues About Mass Layoffs
Don't expect IBM to say anything about "layoffs" or "RAs"
The Fall of the EPO (or the "Alicante Mafia" at EPO) Will be Due to This Reckless Lawyer Who Does Cocaine in Public While Speaking for the EPO
The longer European politicians (and media) turn a blind eye to this corruption, the worse it'll get
Why RMS is Scary to GAFAM 'Engineers' and the GAFAM Apologists (or Addicts)
especially because of his ideas and his way of life
Firefox 'Market Share' Down to All-Time Low in 2026, Adding to It User-Hostile 'Features' Only Worsens Things
What is the goal of Mozilla at this point?
Links 26/01/2026: Windows Back Doors, American Winter Storm, and Report Says Iran's "Protest Death Toll May Exceed 30,000"
Links for the day
Life Got Simpler and Therefore Also Healthier and Happier
Some people envy not wealth but happiness (which they're unable to attain, even with hoarding and accumulation)
Links 26/01/2026: Financial Stress in German Farms and Germany Wants to Take Its Gold Reserves Out of the US
Links for the day
Gemini Links 26/01/2026: "Lack of Meaningful Things" and Getting Back to Programming
Links for the day
Strong Correlation Between the Slop Ponzi Scheme (or Bubble) and Major Disasters
BitCoin ruins the planet; so does slop
We Will Never Allow the "Alicante Mafia" to Hide "Cocainegate"
transparency typically scares malicious actors
Fewer Involuntary Interruptions This Year
This year we're doing much better
Prisons Are for Dangerous People Who Pose a Threat to the Public, Not People Who Inform the Public
At the end of the week EPO workers go on strike
Microsoft Loses Grip on Indian Ocean
Many countries, including in older allies of the US (such as Canada and the US), look for ways to get out of Microsoft dependence urgently
The Great "AI" CON Explained by Dr. Andy Farnell
LLMs are basically advertisers of sorts
Links 26/01/2026: "Journalists Detained", in Germany "Unjustly Jailed Man Gets €1.3 Million Compensation"
Links for the day
Red Hat Quietly Going Extinct After Bluewashing in 2026
At this point it would be rather foolish to assume that IBM will let Red Hat just "do its own thing" or maintain its corporate culture, identity, projects etc.
The "Alicante Mafia" - Part XII - Kris De Neef and Roberta Romano-Götsch, Who Stepped in for the Cokehead, Have No Comment on His Cocaine Usage (and the EPO's Cover-up)
Sh-t floats to the top.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, January 25, 2026
IRC logs for Sunday, January 25, 2026
Gemini Links 26/01/2026: Cold Perception, Software Patches in NixOS, and Sunk Cost Fallacy
Links for the day
Fake IBM Retirements (IBM Gives Older Workers Ultimatums, Deadlines, and Carrots on Sticks)
As they point out, IBM is desperate to lower costs
Linuxiac is Basically a Fake News Site, But It's Being Fed by Google News
Because Google News is run by Google, a slop pusher
Links 25/01/2026: Slop "Tribalism", Nike Apparently Cracked
Links for the day
Claims That PIPs Are Abused for Silent Mass Layoffs at IBM (Without Severance) or Forced Retirements
Performance Improvement Plans (PIPs) "clearly bogus as everyone on my team who has been on one has been fired"
WebM Version of Richard Stallman's Latest Talk (Georgia Tech Talk)
The file size is smaller
After Half a Decade Vista 11 is Still a Giant Failure
Don't expect Microsoft to gain a foothold
Details on IBM Layoffs in the EU Last Week, Same Allegedly Coming to the US Shortly
"Around 50 people affected in Belgium."
Technology Trends Driven by DRM Giants, Planned Obsolescence, Not the Needs of the Buyers
The "pushers" think of customers as "users"; and they encourage passivity, Stockholm Syndrome
Links 25/01/2026: Microsoft BitLocker Backdoored for Decades Already, Microsoft-Backed ICE Still Murders Civilians
Links for the day
Gemini Links 25/01/2026: "Expert in a Dying Field" and Global Commands
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, January 24, 2026
IRC logs for Saturday, January 24, 2026
After the Slop Bubble
At the end, looking back, we'll all generally understand that the net effort of slop was environmental destruction
IBM CEO Says IBM is Just Reliant on Buzzwords That Are Overhyped
IBM has nothing to show anymore and telling fairytales to shareholders is a temporary 'fix'
The "Alicante Mafia" - Part XI - No Comment From Steve Rowan, Niloofar Simon, and Christoph Ernst About Cocaine Inside EPO
What kind of patent office is this?
Projection of Fanatic From Microsoft
Microsoft Lunduke is pandering to the 4Chan 'crowd'
Digg.com (Digg) is a Censorship Platform, Just Another Social Control Media/Network, Controlled by the Few
We are not going to bother with any social control media
Spam, Slop, and Fake 'Articles' Regarding "Linux"
Serial Sloppers like these are harming real reporting about Linux and GNU
Rape investigation dropped: Will Fowles & ALP transgender deception
Reprinted with permission from Daniel Pocock
Diversity, Grooming & Debian transgender Zero
Reprinted with permission from Daniel Pocock
Pauline / Maria / Alice Climent(-Pommeret) & Debian transgender offensive cybersecurity deception
Reprinted with permission from Daniel Pocock
Did judge with transgender sister & Debian conflict of interest help cover-up a death?
Reprinted with permission from Daniel Pocock
Giving a Voice to the Community (Even When It's Inconvenient or 'Scary')
Once upon a time we were threatened with deplatforming for merely reposting articles by Daniel Pocock; we no longer have this problem
Links 24/01/2026: CBS News Demolished From the Inside and Many Publishers Admit Layoffs
Links for the day
Gemini Links 24/01/2026: Dreams and Raspberry Pi Zero 2W
Links for the day
Richard Stallman's First Talk in US College Since 2018: Videos and Photos
There are some backstories
Judge Richard Oulevey (Grandcour Choeur, Tribunal Vaud) & Debian shaming abuse victims and witnesses
Reprinted with permission from Daniel Pocock
Judgment: French army vanquishes German FSFE on Hitler's birthday, Microsoft contract dispute (1716711)
Reprinted with permission from Daniel Pocock
EDPB/CNIL privacy expert Amandine Jambert (cryptie, FSFE) implicitly admitted lying about harassment when she resigned admitting conflict of interest
Reprinted with permission from Daniel Pocock
Links 24/01/2026: TikTok Controlled by Alt Reich in US Now, White House Shares Fake, Manipulated, Misleading Images Already
Links for the day
Projection Tactics - Part IV: SLAPP by Americans Against Techrights (UK) to Hide Serious Abuses Against American Women
"PRs need to stop being complicit in suppression of information via SLAPPs"
Dirty Laundry at Debian and Elsewhere
We cannot just brush aside real issues involving real people and their families
Illegal, Unconstitutional Kangaroo Court for Patents Drops the Masks, Shows Its Real Purpose is to Serve Multinational Monopolists and Crush European SMEs
Europe (or the EU) is rapidly becoming a corporate project, not a unified governance initiative
The "Alicante Mafia" - Part X - EPO Strikes to Begin Next Week
Things gradually escalate this month
Gemini Links 24/01/2026: Snow, Boxing, and Lisp is Fun
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, January 23, 2026
IRC logs for Friday, January 23, 2026