Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Microsoft: Work Weekends Too
Microsoft literally working its workers to death
Stallman Has Explained Slop is "Marketing Hype Campaign" and Torvalds Agreed. The Difference is the Bribes.
So be like Stallman
 
Richard Stallman's Site Still Offline (Third Day), But Richard Stallman is Active Online
he is busy online despite his site not being accessible so far this week
PIP Layoffs at Microsoft, Even in India
Microsoft is trying to hide the true scale of the layoffs
Layoff Trackers Are a Sham, They're Like US 'Unemployment Data'
Layoff trackers are similarly misleading as they only measure what companies openly admit and register with WARN notices
The Peculiar Case of OSNews, Which Experiments With Slopfarming
It wasn't published in error. It has been there for two months.
Russian Federation is Removing Windows From Computers
Windows is going "out of fashion"
XBox CEO Has No Clue What She is Selling
Some people believe Microsoft will parcel and offload the whole "gaming" unit to some other companies
analognowhere.com and xkcd.com Selling Physical Copies of Webcomics
That's one way to support their work
PIP/GVSA at Microsoft: Mass Layoffs Disguised as Something Else
Microsoft is trying to cheapen the workforce because the numbers don't add up
Microsoft Lunduke Uses Twitter ("X") Because It's Algorithmically Designed to Boost His Worldview/s, He Ignores What "X" Is
Maybe all those people really deserve one another
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, August 31, 2026
IRC logs for Monday, August 31, 2026
Censorship by Threats
It should be noted that the Web site of Richard Stallman will soon enter its third day of downtime
In Romania, GNU/Linux Reaches 6%, According to Clownflare
Tomorrow we'll see the latest data from statCounter (for September)
Gemini Links 01/09/2026: Denali Park Train Trip, Crafts, and Community-Building in smol.pub
Links for the day
Microsoft Workers Doing 80 Hours a Week After Microsoft Culled Their Colleagues
there are days when they work 17 hours a day (barely any time left to sleep and eat) and work starts at 5AM
IBM Defrauds Shareholders With Fake News (Bribed Press) About "Quantum"
That says a lot about the state of "Tech Giants" and also the utterly shameless state of the media
Record Highs for GNU/Linux, Especially in the United States of America
the "market share" of GNU/Linux is about 9%, still about a third of what Vista 11 stands at
PIPocalypse at IBM
Silent layoffs
Spending Over a Million Bucks on Lawsuits Abroad When There's a Big Mortgage to Pay in America
Priorities, priorities...
Gemini Links 31/08/2026: Announcing ROOPHLOCH 2026, smol.pub Discussion, and LLM Plagiarism Engines Target Geminispace
Links for the day
Richard Stallman's GNU Turns 43 in 4 Weeks, FSF Growing
In a few weeks GNU turns 43
IBM's Cuts Are Worsening Security in GNU/Linux
IBM is still run by the same idiot who proposed taking over Red Hat
Links 31/08/2026: Anthropic Sued Again for Copyright Infringement of Massive Scale, 'Tokenmaxxing' Shows Slop is a Worthless Liability
Links for the day
Links 31/08/2026: "Teslas Are Still Driving Into Oncoming Freight Trains" and "LLM Moats Quickly Evaporating"
Links for the day
Debian Project Discards About 25% of the Votes on LLM Slop, Microsoft Votes in the General Resolution (GR)
"[t]he rules of the vote saw community members asked to rank each of the eight proposals. Just under 600 people voted, but Debian’s election team rejected many for unspecified reasons, leaving almost 450 valid votes to count."
Essentiality of Rest and Killing Oneself for Vicious Companies
Working for Microsoft is foolish
In the UK, Bing (Microsoft) Down to Lowest Level Since January
our tax money being passed to Microsoft via MoUs (back door deals with kickbacks)
SLAPP Censorship - Part 167 Out of 200: The Court of Appeal Might be the Next Step
Today is our last vacation day
German Government Sponsors IBM Because of GNU/Linux
Flatpak is sponsored by, run, and controlled by IBM
Richard Stallman Speaks to Christine Hall of FOSS Force, stallman.org is Down for Over a Day
interview does a good job addressing the hype about LLMs too
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 30, 2026
IRC logs for Sunday, August 30, 2026
Gemini Links 31/08/2026: Holidays, Stream of Consciousness, and Posting Online
Links for the day
Anniversaries Next Month
The month should be otherwise quiet and uneventful for us
Coding is Not Obsolete
we drown ourselves in chaff to meet "LOC" objectives while ignoring everything else
Microsoft Layoffs Perpetual But Silent, People Pushed Out Using Pressure or Incentive Schemes
Earlier this month we named some of the programs
Links 30/08/2026: Apple Rant and LLM (Slop) Scrapers Target Gemini Protocol and Gopher
Links for the day
Salaries Are Counted in Money, Not in Participation in the Employer's Scheme
articles greatly exaggerating GAFAM salaries
Walls in Free Software
mind your own business and move on
Even Linux Cannot Cope With Slop
Bots on the Web are truly obnoxious
What a Summer!
Tomorrow is the last day of this month
Links 30/08/2026: Soldiers in Niger Attack Presidential Palace and Airport, Nepali City Struggles to Handle the Many Dead Bodies
Links for the day
Clownflare Sees GNU/Linux Rising to 11% This Past Week
Is it the year of "Linux in China"?
Links 30/08/2026: Russian Strike on a Ukrainian Warehouse and Rhetoric Escalations
Links for the day
Gemini Links 30/08/2026: Photography, Paper Books, Linux Kernel and the Debian Projects Permitting Slop Plagiarism
Links for the day
Imagine a World Where Nobody Fights for Software (and Computing) Freedom
The community keeps fighting back, so some of these ambitions are delayed or watered down
FSF Has Grown (More Staff) After a Year of Financial Growth
On October 4 the FSF turns 41
GNU/Linux Has Become More Mainstream in the United Kingdom
It's a long weekend here and we guess some people dabble in GNU/Linux migrations, at least at home
SLAPP Censorship - Part 166 Out of 200: Garrett Wasn't Found Innocent Per Se, the Court Wanted More Evidence of Who Was Behind Particular Accounts Using Tor
It's complicated
Criminals Don't Obey Laws, California Does Not Enhance Online Safety
It has been a while since we last mentioned so-called 'age-verification' laws
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, August 29, 2026
IRC logs for Saturday, August 29, 2026