Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Intercontinental Brigading - Part XVIII - Microsoft is Not the Victim (It Was Never the Victim), It's Just DARVO
"DARVO is now in the dictionary. That’s a win for abuse survivors"
Intercontinental Brigading - Part XVII - The Relevance of Silent Layoffs at Microsoft
"Economic Crime and Corporate Transparency Act: strategic lawsuits against public participation (SLAPPs)"
Intercontinental Brigading - Part XVI - The Faustian Pact That Irritates Hired Guns is Still a Distraction From the Serious Harm Done by Their Clients to GNU/Linux Users (Notably Plagiarism and Back Doors)
We'd rather talk about the harms caused
Microsoft 'Buyouts' Sound Just Like 60,000 Layoffs of 'Expensive' or More Experienced Staff ('Soft' Layoffs or Even Worse, Negligible Severance)
This is not a "gift" to staff, it's just a pink slip with a hundred dollar bill attached to it
 
Links 27/10/2026: Google Increases Spying on Online Everything (Personal Files, Mail), Anthropic Takes Its Losses and Debt Public
Links for the day
The British Economy Too Dependent on an American Slop Scheme
United States Government debt will soon eclipse 40.5 trillion dollars
We've Already Begun Work on the 20th Year of Techrights
We'll do a yearlong endeavour of improvement instead of a one-day hurrah
Volunteers or Unpaid Developers Won't Bother Interacting With Mindless LLMs That Pass Labour From Lazy Companies to Human Beings
The people who run Debian are killing the will to do Free software
Slop is Killing the Open Web
The Web is a jungle and "open sites" (without restrictions or walls) are exposed to the 'feeding frenzy' of reckless plagiarists who call their "theft" something like "super intelligence" or "training"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, October 26, 2026
IRC logs for Monday, October 26, 2026
As Microsoft Tells Close to 30% of Its Staff to Leave IBM Takes Notes
IBM does the same with PIPs
It's Perfectly Possible That Microsoft Has Just Told Most of Its American Workers to Leave
A better news headline might focus on the US and give a figure like 50%, not "quarter"
Richard Stallman Was Right About "Hey Hi"
Now the chicken come home to roost
Gemini Links 27/10/2026: "To Change or Not To Change?" and "Initial Planner Plans"
Links for the day
Links 26/10/2026: Microsoft Chaffbot "Building Detailed Psychological Profiles of Its Users", Man Executed for Childhood Offenses
Links for the day
Gemini Links 26/10/2026: Writing Down Dreams and "Sabbath as Resistance"
Links for the day
The Register MS Gets Rid of Disclosures About Paid-for Spam Regarding "AI", It Also Composes Fake News for the Sponsors
Selling away its credibility is known as "Sellout"
This is How Microsoft Ends (Over a Quarter of the Company Now on the Chopping Block)
Microsoft has quit pretending
Search Without Encryption for Legacy Systems (Permacomputing) and Full Backward Compatibility
At your own risk
Shift to the Lula (Left)
Lula is a friend of Free software and ODF
More Stories and Material Than We Can Publish
We're gaining or have amassed material faster than we manage to publish
European Patent Office Takes From the Poor to Give More to the Rich
The "pension schemes are overfunded at 120.5%"
Intercontinental Brigading - Part XV - Annualised Consequences for Opposing Microsoft Back Doors in Linux Since 2012
a roundup of what we got from GGG
Links 26/10/2026: China’s Communist Party Plenum and Aleksandar Vucic Concedes Defeat
Links for the day
In Reporting, Timing is Everything
If you keep calling people "paedophiles" when you yourself are connected to paedophiles (or are a paedophile), you're attracting a lot of unwanted attention to yourself
Links 25/10/2026: Microsoft Layoffs and Cuts, Luiz Inácio Lula da Silva Wins Election
Links for the day
Gemini Links 26/10/2026: Brazilian Politics and Leaving Bear Blog
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, October 25, 2026
IRC logs for Sunday, October 25, 2026
Another Form of Microsoft Silent Layoffs: Workers That 'Expire'
When the media becomes a lapdog, not a watchdog, false narratives gain traction
Carte Blanche for GPL Violations 4 Days Ago (by Torvalds)
Slop disclosure is no longer required for the Linux Kernel
There Are No Women That Are Kernel Developers Sent by Corporations Which Claim to Champion Diversity
As noted the other day
Sites with "Linux" in Their Name Cannot Slop and Retain Readers
if they write about "linux "(or "Linux") using LLMs they will be caught, then shunned
At Microsoft, the Silent Layoffs Impact Executives Also
Microsoft hid the real story of Helen Chiang
Linus Torvalds Defected to Enshittification
Linus Torvalds is betraying a generation of high(er) standards
Links 25/10/2026: TMZ Revisits Epstein's Connections to Bill Epsteingate, "Italy Hit by New Cost of Living Protests"
Links for the day
Microsoft’s Spin About Mass Layoffs and Shutdowns: They "Never Should Have Existed"
Microsoft-sponsored spin
It's Slop
Maybe we'll exclude It's Slop from our curation. It's a Linux Foundation outpost of sorts, an apologist of sloppy code and plagiarism.
Intercontinental Brigading - Part XIV - Six Years of Learning Irish, But the Real Issue Was Microsoft-controlled 'Secure' (Restricted) Boot
Had I not opposed back doors in Linux, not of this would come about
Gemini Links 25/10/2026: Moana (2026) and OpenBSD Updates
Links for the day
The Netherlands Fast to Adopt GNU/Linux, "Market Share" Rises to Two-Digit Value (on Desktops/Laptops)
It peaked at around 20% yesterday
DST Still Needs to Get Abolished
Get rid of DST, efficiency will improve and systems will become more reliable
PHP2Shell as Paid-for FUD Campaign (Intended to Help Sell Slop and Fake "Market Value" of Slop Pushers)
PHP2Shell considered overhyped [...] Remember all the paid-for hype regarding Mythos? What happened to all that?
Microsoft Sort of Tried to Sell XBox Piecewise (Offloading Microsoft)
XBox is in a morbid state
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 24, 2026
IRC logs for Saturday, October 24, 2026