Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Like GAFAM, US Telecom Industry Has Severe Debt Problem
Maybe their real problem is true profitability
Latest Example of False Marketing by Anthropic
Like Scam Altman, they're better at buying publicity (paying for hype) than they are at delivering something of genuine value [...] That has the full make-up of fake news and a publicity stunt
IBM: From RAs to "Workforce Re-balancing" (New Names for Mass Layoffs)
Well, "workforce re-balancing" means "RAs", which is a misleading acronym IBM has devised to soften if not hide mass layoffs.
Microsoft's Grip Has Slipped, Market Share Steadily Declining
This is why Microsoft is having financial issue
SLAPP Censorship - Part 60 Out of 200: Talking About Corruption at Microsoft and Arrest for Strangulation is "Malice"
At the moment Brett Wilson LLP has no new clients
The Corrupt Lecture the Non-Corrupt - Part VIII - "Red Line" When the European Patent Office (EPO) President Sleeps With Sister of "Cocaine Communication Manager" (Whom He Unconditionally Protects)
If only management took its own words (idealistic pontification) seriously
 
Anthropic and Claude Are National Security Risks Not Because of Politics But False Marketing and Vandalism, Plagiarism Sold as Innovation
The slop hype is causing severe damage
Gemini Links 28/04/2026: Misfin, ELPiS, and Developing Another Gemini Client
Links for the day
US Government Sites See More Traffic From Apple Devices Than Microsoft Windows PCs
Keep this in mind when Microsoft talks about mass layoffs while calling these "buyouts"
Layoffs Versus Buyouts
Microsoft has mass layoffs and those target the most experienced people in one of the best-paid locations
Aaron Hillel Swartz Would Have Turned 40 This Year
Aaron Swartz killed himself in 2013
The Trumps Are Making Jimmy Kimmel More Famous and Popular
Comedy has long been "controversial", but trying to get people sacked for the 'wrong' joke results in having no comedians or only pseudo-comedians who are the dictator's jester/joker
Links 28/04/2026: Microsoft's GitHub Upselling After Two Leaders Jumped Ship (Losses Pile Up), "Inflation Jumps," and More
Links for the day
IBM Laying Off Thousands of Workers Again, Based on Q1 Earnings Call
under the guise of "workforce rebalancing" we are again seeing that IBM plans to pay people (severance) to leave
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 27, 2026
IRC logs for Monday, April 27, 2026
Gemini Links 28/04/2026: Good Sunrise Viewing and Self-hosting from Home
Links for the day[1;5C
Microsoft Insiders: If You Don't Take the Lousy Severance-Like Offer, They'll PIP You Out (Microsoft Signals to People Over 40 That They'd Better Vacate the Place)
Microsoft targets its most experienced (read: expensive) workers
"AI" 16 Times in One 'Article'. The Register MS Got Paid to Post This Spammy, Promotional Piece of Slop.
Pay closer attention to who pays and who gets paid
Links 27/04/2026: Chernobyl Disaster at 40, "Heartbreaking" Decline of Australia
Links for the day
Gemini Links 27/04/2026: Gopher Catchup, MNT Reform, and Injuries
Links for the day
Red Hat Circling Down the Slop Drain
IBM, governed by slop fanatics, is going to do a lot of damage
Slop is an Addiction, Its Users Find It Addictive
please do not tolerate people who slop
The Corrupt Lecture the Non-Corrupt - Part VII - Secrecy at the EPO (Regarding Cocaine and Nepotism) Has Undermined Trust in Management
If Europe's second-largest institution is run by the "Alicante Mafia", does this mean that other key European institutions are "Mafia"?
SLAPP Censorship - Part 59 Out of 200: Mentioning the Fact Alex Graveley Arrested and Charged for Strangulation in Texas is "Reckless" and "Malicious", According to His 'Hired Guns' in London
it was framed as "malicious"
Links 27/04/2026: Strikes, Corruption in Spain (Spanish PM Sanchez' Wife), and YouTuber Faces Jail Time
Links for the day
Gemini Links 27/04/2026: Gopher Catch-up, Year of Contentment, and Path to Freedom
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 26, 2026
IRC logs for Sunday, April 26, 2026
Journalistic Malpractice: Helping Microsoft Paint 'Voluntary' Layoffs (Before PIPs) as "Buyouts"
What does this tell us about today's media?
The Man IBMers Regard or Already See as Likely Successor of Krishna (or Next CEO of IBM) is a Slop Fanatic
How dangerously misguided
The Corrupt Lecture the Non-Corrupt - Part VI - Management of the European Patent Office (EPO) Covered Up Cocaine Use, Even Colleagues Not Informed
the self-described "fu--ing president"
SLAPP Censorship - Part 58 Out of 200: 5RB and Brett Wilson LLP Helped Garrett and Graveley Make Equivalent of GAFAM NDAs Superficially 'Enforceable' in the UK, Using Threats
laziness results in many hours and high lawyers' fees
Who Controls Fedora? IBM and GAFAM.
Don't for a moment believe that IBM understands GNU/Linux. We are quite certain nobody in IBM's Board of Directors uses it.
State of Slop About GNU/Linux
As the incentive to publish is reduced (competing with slop is no fun), the effort/money invested in stories goes down
Links 26/04/2026: Korean Inflation, GLP-1 Drugs Linked to Cognitive Impairment, Lithuania's Public Broadcaster LRT Besieged
Links for the day
Hopefully Smooth Sailing in OS Upgrade
There are some contingencies at hand
Links 25/04/2026: "Horrible Economics of AI Are Starting to Come Crashing Down", More Restrictions Placed on Social Control Media
Links for the day
Getting Aggressive Suggestive of Loss - Part IV - Shutting Down My Existence
Would anyone out there tolerate such messages sent from burner accounts?
Gemini Links 26/04/2026: Gemini Movie Database (or GeminiMDB) and Star Trek III
Links for the day
Weeks Before Linux Removed Over 100,000 Lines of Code Due to Slop 'Bug Reports' Microsoft Paid 'Linux' Foundation to Advance Slop in the Name of 'Security'
What can possible go wrong? Both for security and for stability.
Tracking Ages of People
To stay "safe" tell us your age
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 25, 2026
IRC logs for Saturday, April 25, 2026