06.25.08

Gemini version available ♊︎

Microsoft OOXML: Lies, Whitewashing, Abuse and Vulnerabilities

Posted in Deception, Microsoft, Open XML, OpenDocument, Security, Windows at 3:29 pm by Dr. Roy Schestowitz

If it barks like a dog, it’s probably a dog

T

he sheer abuse surrounding OOXML cannot ever be denied (not without a guilty conscience). We wrote about this latest debacle yesterday and the day before that. According to the article from ZDNet UK, “Microsoft admits to standards ignorance pre-OOXML.” It’s summarised as follows.

Microsoft has admitted that, despite being one of the dominant names in IT for over 30 years, it had little or no experience or expertise around software standards until the company was mid-way through the process of getting Office Open XML approved by the International Organization for Standardization.

Needless to say, this is a lie. It’s an embellishment at best — some lipstick and a dress on a pig. Microsoft not only knew the rules, but it also knew very well how to abuse them. Remember these words from Jason Matusow, as highlighted by Andy Updegrove last year:

“There is no question that all over the world the competing interests in the Open XML standardization process are going to use all tactics available to them within the rules.”

This sounds like a crazy gambler who is willing to pull any dirty trick out of the book, does it not? It sure ended up this way.

What would the world have with Microsoft’s XML? Based on the latest news: nothing less than “critical” vulnerabilities (highest level of severity).

Critical vulnerability in Microsoft XML Core Services patched

Microsoft Security issued a patch today for a critical vulnerability affecting all supported editions of Windows 2000, Windows XP, Windows Vista, Microsoft Office 2003, and the 2007 Microsoft Office System.

Does the world really look forward to Microsoft’s XML ‘solutions’? More so with binary 'extensions'?

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

2 Comments

  1. Stephane Rodriguez said,

    June 26, 2008 at 1:42 am

    Gravatar

    “Needless to say, this is a lie. It’s an embellishment at best — some lipstick and a dress on a pig. Microsoft not only knew the rules, but it also knew very well how to abuse them.”

    This is a lie if you take Microsoft as a whole or if you take indeed some of the guys that were specifically hired to make this possible.

    But it is partly true at least for some of the guys who were part and very active :
    - Brian Jones, joined Microsoft in 2000, a program manager who concentrated on adding XML to Microsoft Office. Many failed attempts. You can say many things about him, but not that he’s the guy that led to the national bodies stuffing.
    - Doug Mahugh : hired a year before the decision to send “OOXML” to ECMA. Again, this guy was hired to do tech conferences all over the world, not to stuff national bodies.

    It is a shame that in fact nobody knows who at Microsoft actually planned the national bodies stuffing and made it possible. Those are the guys to blame. That being said, those in national bodies that accepted the $deal$ are just as much guilty than Microsoft.

  2. Stephane Rodriguez said,

    June 26, 2008 at 1:43 am

    Gravatar

    Erratum : I meant “But it is partly NOT true”.

DecorWhat Else is New


  1. Links 26/01/2023: LibreOffice 7.4.5 and Ubuntu Pro Offers

    Links for the day



  2. Links 26/01/2023: GNU poke 3.0 and PipeWire 0.3.65

    Links for the day



  3. IRC Proceedings: Wednesday, January 25, 2023

    IRC logs for Wednesday, January 25, 2023



  4. Companies Would Collapse Upon Abandoning Their Original Goals (That Attracted All the Productive Staff)

    Staff with technical skills won't stick around in companies that reject technical arguments and moreover move to proprietary software in a company that brands itself "Open Source"



  5. [Meme] Listen to Your Workers, Avert Disaster

    Companies that refuse to take input from staff are doomed to fail



  6. The ISO Delusion: When the Employer Doesn’t Understand the Company's Value Proposition (Building Systems) and Rejects Security

    Sirius ‘Open Source’ has failed to sell what it was actually good at; instead it hired unqualified people and outsourced almost everything



  7. Links 25/01/2023: NuTyX 23.01.1 and GNU Guile 3.0.9 Released

    Links for the day



  8. Links 25/01/2023: Stratis 3.5.0 and Many Political Links

    Links for the day



  9. New Record Low: Only One 'Linux' Article in ZDNet in More Than Two Weeks

    Only a few years ago ZDNet published about 3 “Linux” stories per day (mostly FUD pieces); now it’s a ghost town, painted in ‘alien green’; considering ZDNet’s agenda (and sponsors) maybe it’s better this way



  10. Links 25/01/2023: Pale Moon 32.0 and DXVK 2.1

    Links for the day



  11. IRC Proceedings: Tuesday, January 24, 2023

    IRC logs for Tuesday, January 24, 2023



  12. ISO Certification Hardly Tackles Any of the Real Issues

    The real-world threats faced by private companies or non-profit organisations aren't covered by the ISO certification mill; today we publish the last post on this topic before proceeding to some practical examples



  13. [Meme] Medical Data Sovereignty

    What happens when your medical records/data are accessible to a company based abroad after a mysterious NDA with the Gates Foundation? The International Organization for Standardization (ISO) does not mind.



  14. The ISO Delusion: Sirius Open Wash Ltd. and Medical Data/Projects at Risk/Peril

    Sirius ‘Open Source’ was good at gloating about “ISO” as in ISO certification (see our ISO wiki to understand what ISO truly is; ISO certification needs to be more widely condemned and exposed) while signing all sorts of dodgy deals and lying to clients (some, like the Gates Foundation, were never mentioned because of a mysterious NDA); security and privacy were systematically neglected and some qualified as criminal negligence (with fines/penalties likely an applicable liability if caught/reported)



  15. Links 24/01/2023: Wine 8.0 is Ready, FSF Bolsters Copyleft

    Links for the day



  16. Azure Has Layoffs Again, Microsoft Still Cutting

    Even supposed ‘growth’ areas at Microsoft are being culled (this growth is faked, it is a lie)



  17. Links 24/01/2023: Tails 5.9 and ArcoLinux v23.02

    Links for the day



  18. Links 24/01/2023: GStreamer 1.22 and Skrooge Gets New Site

    Links for the day



  19. IRC Proceedings: Monday, January 23, 2023

    IRC logs for Monday, January 23, 2023



  20. The Inside(r) Story of ISO 'Certification' Mills

    Based on my experiences inside Sirius ‘Open Source’ — as I was there for nearly 12 years — I finally tell what I’ve witnessed about ISO certification processes (see ISO wiki for prior experiences)



  21. [Meme] ISO Selling 'Reputation' to Small Businesses (for a Large Fee)

    As we’re hoping to demonstrate throughout the week, ISO certification is, in practice, worse than worthless (just a waste of small businesses’ resources, much like patents); call it the ‘ISO tax’, an artificial barrier to entry that boils down to money



  22. [Meme] ISO Certification for Paying for Certificates on Time

    ISO is a phony authority; it makes business by issuing mostly worthless paperwork that wastes people’s time and accomplishes nothing (except making ISO in rich Switzerland even richer)



  23. The ISO Train Wreck at Sirius 'Open Source'

    Before we proceed to showing how Sirius ‘Open Source’ blatantly ignored security and privacy we wish to show how ISO (see ISO wiki) basically ‘sold’ a certificate to Sirius — this is like a “diploma mill” but something that’s for businesses, not individuals



  24. Sirius Lying About ISO to Justify Giving the Technical Staff Some Classic 'Bullshit Jobs' While Censoring/Covering Up Incompetence

    Sirius ‘Open Source’ has long used “ISO” — and sometimes “GDPR” — as catch-all excuses for all sorts of nonsensical policies; does ISO realise the degree to which it is being misused by incompetent 'box tickers'?



  25. Links 23/01/2023: mozilla.org's 25th Anniversary and IceWM 3.3.1 Released

    Links for the day



  26. Report: The So-called 'Linux' Foundation is Reducing Focus on Linux

    The so-called ‘Linux’ Foundation is reducing its focus on Linux and is instead busy promoting Microsoft, Facebook, and other interests that GNU/Linux users strongly dislike



  27. Links 23/01/2023: Fwupd 1.8.10

    Links for the day



  28. IRC Proceedings: Sunday, January 22, 2023

    IRC logs for Sunday, January 22, 2023



  29. Links 23/01/2023: Many Pgpool-II Releases, risiOS 37 Reviewed

    Links for the day



  30. [Meme] Sirius is Not Open Source and Thugs Took Over the Company

    Despite its name, Sirius ‘Open Source’ actively replaces Open Source with proprietary software, even for its very own infrastructure (while almost all the “managers” use proprietary software)


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts