Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

IBM Eliminating Over 20,000 IBM Workers by Year's End, Insiders Claim
the layoffs are silent
The Register MS Publishes More Word Salads Promoting "AI" Because It's Paid to Do So
Hype, name-dropping, and scaremongering
 
We'll Never Do Slop!
Being against slop is not being "left behind"
Thieves Complain About the People They Steal From
"When you point the finger at someone, there are three fingers pointing back to you"
Links 04/09/2026: "The Rise of the Billionaire Lobby", the "Imperialist Delusions", and Digital Restrictions (DRM) From Nvidia
Links for the day
Buying From China
Nations must begin to speak about their digital sovereignty, which Free software is best equipped to grant and best positioned to assure in the face of outside resistance
GNU/Linux Continues to Grow in China
GNU/Linux reached its highest point in a month
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 03, 2026
IRC logs for Thursday, September 03, 2026
Gemini Links 04/09/2026: Forgotten Realms Avatar Series and Slop Plagiarism's Footprint in Gopher/Geminispace
Links for the day
Like Uber, Paypal's Debt Has Shot Up 2.5 Billion Dollars in 3 Months, Now the Mass Layoffs Come to India
even reducing the salaries by offshoring isn't enough to save the company
Microsoft "engineers who aren’t critical are let go" this week/month (silent layoffs)
"stack ranking"
Is Microsoft Trying to Kill What's Left of XBox by Year's End?
How many people will still bother purchasing these consoles by the end of the year?
SLAPP Censorship - Part 170 Out of 200: Downtimes
Yesterday traffic skyrocketed here
Gemini Links 03/09/2026: Google Maps, Gemini's Early History, and Suppressing Slop Plagiarists
Links for the day
Links 03/09/2026: Unsafe Skies, Thunderbird Adopts Proprietary / Vendor Lock-in Traps, "Xbox Live Down Again"
Links for the day
Growing Thirst for Free Software, the LibreOffice Edition
LibreOffice is in "high demand"
Links 03/09/2026: John Ternus Enters Apple Amid Mass Layoffs, Journalist İrem Delice Arrested
Links for the day
Stallman.org Down Due to Virtual Machines Issue, "Senior Engineers are Investigating the Issue" Since Saturday
RMS site down due to virtual machines issues upstream
Linux Foundation is Plagiarism Hub, Linux is at Risk From It
Torvalds never looked weaker and more compromised
Gemini Links 03/09/2026: Back in Japan, Another New Year, Reasons to Avoid Have a "Smart" "Phone", and Rant About Built-in Batteries
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 02, 2026
IRC logs for Wednesday, September 02, 2026
Identi.ca is Practically Dead, Just Like All Social Control Media (Eventually)
All Social Control Media is a waste of time
Gemini Links 02/09/2026: Intentions, Publishing on Workstations, and Connectivity Standards Alliance (CSA)
Links for the day
GNU/Linux Reaches 6% in Nepal
Today I checked GNU/Linux in Nepal again
SLAPP Censorship - Part 169 Out of 200: Calling People "Nazis"
'Cancel culture' in action
GNU Turns 43 This Month, GNU/Linux Turns 35 Next Year
It seems like no area of computing has not been impacted by the GNU/Linux revolution
Uber Debt Grew 2.5 Billion Dollars in 3 Months, Company Lays Off at Least 10% of Workforce
The media repeats the "official" numbers
Links 02/09/2026: The Machine Stops, AuraSearch, and DOOM 1/2
Links for the day
1-1 Meetings at IBM This Week, PIPs Expected, Maybe RAs Too
As usual, we invite whistleblowers to tell us what's going on
Links 02/09/2026: Germany Blames Russia for Leipzig Airport Drone Attack and China Gains Power as US Faces Humiliation in the Midst of Presidential Cover-up
Links for the day
Quit Talking About "AI Layoffs" and Talk About How Chatbots and Other Bots Broke Recruitment Processes by Cheating
Bots talking to other bots isn't HR; it's a catastrophe
It's Inevitable Anyway, So...
of course blame Chinese Communists for the "anti-AI" messages
Robotics Isn't "Hey Hi", Robotics Isn't New Either
Is the official Arduino blog becoming shilling platform for Qualcomm's "hey hi" [so-called 'intelligent'] chips?
Giving 'Free Publicity' to the People You Hate and Attack
Be careful what you wish for in social control media
Today We'll Focus on Growth of GNU/Linux
We've meanwhile noticed that Clownflare statistics for north American nations show 19% of requests (CDN) originating from GNU/Linux
IBM Secret (or Silent) Layoffs in September 2026
We need whistleblowers
Gemini Links 02/09/2026: GAFAM's E-mail Cartel, ROOPHLOCH 2026, and Homeworlds
Links for the day
Not Only Microsoft and IBM Hide Layoffs (Secret Layoffs) and Fail to Follow the Law (or Bypass It)
Microsoft's tactics are not so unique
People Who Participate in the Slop Plagiarism Pyramid Scheme and the Moral Dilemma (What's Acceptable for a Salary?)
giant pyramid scheme
State of the Slop, Linux Edition
Whether slop about "linux" becomes rarer by the end of this year, well... time will tell
Links 02/09/2026: 'Open' 'AI' (Proprietary Slop Plagiarism) Destroying Evidence, "Data Center Backlash Has Officially Rattled Scam Altman"
Links for the day
Andrew Lee Has Turned Freenode Into a Slopfarm (Because Who Needs IRC Anyway?)
The site is churning out slop all day long
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 01, 2026
IRC logs for Tuesday, September 01, 2026