Bonum Certa Men Certa

OOXML 'Extension' Tricks Have Roots in the Past

After about a week of silence, Rob Weir is back and he's already swinging. You'll find Rob's letter with OOXML objection arguments and you'll also find this elaborate view on properietary 'extensions' in OOXML. This isn't exactly new information, but it's worth discussing further.

In previous posts I have pointed out numerous "features" in OOXML which cannot be implemented by anyone else but Microsoft. These stem from a variety of causes, including elements lacking definition ("lineWrapLikeWord6") to features that are tied to Windows or Office (e.g., Windows Metafiles) to items that are "merely referenced (OLE, digital ink) to items that although featured prominently in Office marketing materials, are curiously not mentioned at all in the OOXML text (scripts, macros, DRM, SharePoint, etc.). When these issues are raised, the typical response from Microsoft has been along the lines of, "Don't worry, these features are optional. You don't need to implement them. They are there for implementations that know what they mean. If you don't understand them, you can ignore them."


Something in this strategy rang a bell, so dumpster-diving for some antitrust exhibits seemed like a fun idea.

Evidence that this is a recurring strategy is presented below. Highlighted using bold face are bits of particular interest.

Watch how Microsoft used OLE in the past.

Exhibit #1 [PDF]:

From: Bill Gates Sent Sunday, October 06, 1996 11:54 AM To: Bob Muglia Cc: Aaron Contorer; Richard Fade; Steven Sinofsky; Paul Maritz; Nathan Myhrvold; Brad Silverberg; Adam Bosworth Subject: Access, Internet studio, VB and other overlapping products

..

Why is the difference between Internet studio and Access? I can't detect any reasonable difference. Internet studio has taken an approach of putting onto HTML pages the most ugly Microsoft garbage ever seen since COM/OLE programming in C++ was declared a success in order to block language invocation. i am still blown away by seeing all those ugly PARAM statements in the HTML totally confusing anyone who tries to do anything. If something isn't part of the WYSIWYG output then it should be succinct and understandable. This was the opposite of that.


Behold the "black project".

Exhibit #2 [PDF]:

From: John Shewchuk Sent: Thursday, October 05, 1995 2:46 PM To: bens; bradsi; chrisjo; craigm; donbrad; jallard; jimall; johnlu; mikecon; paulma; rict; thomasre To: thomasre Cc: patler Subject: RE: Webmaster/Server ISV event - day one

When I got Gosling and Naughton started on the Java OLE control for Blackbird, it was a sensitive issue at Sun - Gosling was getting it done as a "black project". So please don't raisepublic awareness of the project without checking with Naughtion.

Regarding Java vs OLE controls

Both Gosling and Naughton will admit that java is a programming language and that without APIs to call, Java is kind of stupid. There is a growing consensus among developers that tried HotJava that it has major limitations.

The lack of APIs is the reason StarWave is doing the Java OLE control - so they can get access to OLE automation especially automation of Blackbird objects. Gosling admits that once someone does this it is no longer cross platform and it is hard to be safe.

Finally: OLE and Java go together nicely. You don't need to position them as competitive. Java goes up against VB. We need to get the VB team to respond to Java. Maybe VB should be cross-platform and safe. See the Blackbird rude Q&A.

Regarding overall messages

I think the whole cross-platform issue is going to die down once we start getting cool OLE controls (or Netscape add-ons) that take advantage of DirectX and other Windows 95 APIs. Cross platform is an important customer message but in the long run it a bad technical goal because it means lowest common denominator. So talk the talk, but show customers and publishers what they are missing. Leverage our strength in great Windows 95 capabilities.

Netscape add-ins ONLY RUN IN A NETSCAPE BROWSER. You can't use them in IE, Word, PowerPoint, VB, Delphi, VC++, Blackbird or anything else. You can't even use them inside each other. OLE is OPEN, Netscape add-ins lock you into a Netscape only strategy. This is lame. Java is probably not much better.

Finally, both Java and Netscape add-ins fail to address design-time operation. This is a huge leverage point for Microsoft. Senior people that are fillly in the Netscape camp think twice when they see the Macromedia Director editor come up inside the Blackbird design environment. They think about what it will take to get this done in Netscape and it is a pain.

Why does this matter? Because it represents a radically different model of content creation than Java or Netscape add-ins suggest. CPs don't want to write code!!! They want to focus on creating cool content. They want simple, simple, simple. Programming is hard. OLE controls are PACKAGED bundles of capability. OLE makes it easy for hot software developers to package up a lot of code that the creatives can use. LibD from CRG can attest to the fact that Bud and they could provide their cool runtime to lots of non-programmers. (it turns out that many Macromedia users hate the fact that they have to learn Lingo to do anything cool.)

So let's make sure we explain that OLE controls are more than JUST an add-in strategy. OLE Controls are the start of a COMPLETE strategy. Add an open message, VB Blackbird, IE with OLE control support, open scripting, and so on, and then you have your story. Lets fight on our own turf - in other words, focus on content providers and ISVs (they are the enablers for the content providers) and give them what they want. And let the great applications win over the viewers.

FROM: Brad Silverberg


Infamous Microsoft documentation (if any is made available at all).

Exhibit #3 [PDF]:

To: Douglas Wilson @ Lotus, Scott Kliger @ Lotus, Phil Stanhope @ Lotus, Alex Morrow @ Lotus, Joe Gulhridge @ Lotus, Jack Ozzie @ IRIS, Barry Brfggs @ Lotus, Aswan Dev, Ailen Olsen @ Lotus, Aswan Clients, Jeffrey R Beir @ Lotus, Michael Welles @ Lotus, Steve Manousos @ Lotus, Mike Vassilopoulos @ Lotus

cc: John Landrt @ Lotus, Ilene Lang @ Lotus From: Noah Mendelsohn Date: 02/03/95 03:54:31 PM

Subject: Meeting with Sara Williams Regarding OCX Status and Support

Sara Williams, an OLE/OCX/Cairo evangelist in Microsoft DRG visited with a group of Lotus developers at Rogers Steel on Tuesday afternoon, January 31. Here are minutes of our meeting. The purpose of the meeting was to review Lotus’ concerns regarding Microsoft’s fairness in supporting OCX development, and to answer other questions regarding OCX and OLE.

Unless otherwise indicated, all questions are from Lotus personnel and all answers are from Sara. Sara has promised to respond by email on all the unresolved points listed below. I’ve rearranged the order of discussion to put the most useful new information near the top.

Lotus Attendees: Noah Mendebohn, Scott Kliger, Phil Stanhope, Edward Ogu~ofor, Jeff Buxton

Primary topic:

Lack of appropriate support and documentation for OCX. Microsoft applications and tools seem to have an unfair advantage using OCX-how did Microsoft release container apps when nobody is supposed to have sample code yet?

The most important issue we discussed, and the one we spent the most time on, is Lotus’ concern that OCX support for ISV’s is inadequate, that sample code for containers is not available, that the only server samples are part of MFC and carry restrictive licenses, and that Microsoft has somehow managed to ship products using OCX in spite of these limitations. Speaking only for herself, Sara indicated that she shares many of these concerns. She also said that Microsoft as a whole does recognize that there is a problem regarding support for ISV’s using OCX.

We emphasized the degree to which we view this as a serious threat to our ability to compete. While there were also problems when OLE 2.0 itself was released, the OCX situation is far worse. For OLE 2.0, Microsoft provided comprehensive published documentation, an extensive support infrastructure, and sample implementations which were of moderately good quality and no more restrictively licensed than the Windows operating system itself.

The current situation with OCX is inappropriate. Sara reiterated that she understood our concerns, but said she had not realized the seriousness with which we viewed these problem. She asked what could be cone to resolve the problems. Among the possibilities that we suggested were:

(1) provide freely licensed production quality sample implementations of container and server immediately ... if other samples cannot be provided, remove the licensing restrictions on the relevant parts of the MFC controls implementation and the CDK.

(2) publicly acknowledge that OCX is an operating system API, to be supported with at least the same degree of open process as is applied to the windows API and OLE 2.0.

(3) Provide open support and immediately redress any advantages which may currently be given to Microsoft applications or tools products in using OCX

(4) Lotus believes that support could be improved and integration with OLE technology streamlined if Microsoft were to transfer OCX development responsibility to their systems organization, but that is ultimately an internal concern of Microsoft.

Sara acknowledged that the problems we highlighted are real, and that many of them do trace to the fact that OCX development is done in the tools group. She promised to promptly review our concerns with Doug Heinrich and other senior managers at Microsoft.

OTHER

Q. What OCX containers are available tor testing. For which ones is source available?

A. CPatron (source available, but not a production quality sample), Access (no source), VB.4.0 (Beta-no source), Visual FoxPro (no source). Doesn’t know whether Eforms has OCX container. Cairo shell will.

Q. What about Mike Blaszczack’s sample container?

A. Right, that’s coming when the MSJ article is published, but it’s based on MFC OLE support, so you probably have licensing problems with it. Also Kraig Brockschmidt is writing some new white papers on creating an OLE controls container.

Q. We’ve heard that Microsoft is contemplating support for 32 bit VBX’s after all.

A. I’ve heard nothing about it and I can't imagine why we would do that.

Lotus: Because VBX vendors are telling you that OCXs are too hard to build and that they have too much overhead.

A. I haven’t heard that and I think I would know about any change in strategy. It’s still: VBX is 16 bit only, OCX is preferred, and on 32 bit, it’s the only option.

Q. Is OCX on the Mac? Will it be? What about other Wise platforms?

A. Don’t know...will check. At best, Wise platforms would lag significantly.

Q. Will the OLE documents extensions previewed last week apply to OLE Controls.

A. I would think so. (BTW, I’m not sure she’s right about that. Some of the OLE documents extensions are implemented in the OLE default handler, which is not normally used by OLE controls.)

Q. Tell us about OCX futures.

A. There is an improved CDK in the new Visual C-+, just out. Beyond that, can’t say much. A strange situation has arisen within Microsoft according to Sara. Although the Developer Relations Group (DRG) of which she is a part is organizationally affiliated with the Tools Group (i.e. languages, data bases, etc.), DRG actually has a much closer working relationship with the sysems organization See discussion above.

Q. Can we get the VB 4.0 beta? It’s the only useful example of a production quality OCX container wilh scripling.

A. Will check.

The lack of clear OCX documentation is aggravating a problem we’ve had with OLE 2.0 since the beginning: everybody’s doing it differently.

A. Microsoft is working on a validation suite for OLE 2.0 to test interoperability. First wave may see this in the next couple of months. Not clear whether this applies to OCX - I suspect not (NRM).

Lotus: Great, something like this is needed, but please make sure that ISV’s get to comment before the validation suite is frozen. Compatibility checking is important, but let’s make sure you’re not preventing our apps from doing what they need to do.

Q. Do you have more information on apartment model threading in OLE?

A. Apartment model threading will be supported in Win95 and NT 3.5.1. Should be in current win95 builds on ISDN. Fundamentally, each COM object does its work on a single thread. Sara is currently writing a white paper, with sample code. It will (probably) be available within the next 2 weeks or so on the ISDN server.

Q. When will a common .EXE be usable with the OLE .DLLs on NT and Win95

A. Don’t know. Will check.

What are the details of OLE support in the Chicago shell? Why was Lotus told that the shell would not be OLE enabled when In fact it is? Why was Lotus not given earlier warning if there was a change of plan? We’re still lacking useful documentation on OLE in the shell-is there any?

A. Sara didn’t seem to be familiar with the history of this problem, or with any of the details of OLE enabling in the shell.

Q. .DLLs have advantages over .EXE’s in terms of performance and flexibility, but doesn’t the OCX architecture take us back to where we were with Win16 in terms of programs (in this case components) impacting each others’ integrity? Also: isn’t this an incredibly powerful opportunity for those writing Trojan horses, viruses, etc?

All: This question generated quite a length discussion, but Sara didn’t seem to know whether anyone at Microsoft had given this serious consideration, whether there is an official corporate position on the problem, or whether there are any specific efforts planned to minimize the impact. The Lotus attendees expressed a strong concern that these were serious problems. It’s ironic that we’ve waited for robust, secure, 32 bit operating systems as the appropriate environment for OLE, and now we’re tooking at running multiple components within the same process space. (Noah’s observation, not expressed at the meeting: this is why the research community is looking at special purpose operating systems and special purpose hardware to support component based architectures, it’s difficult to get good pertormance with good isolation using convention processors and OS’s.) Noah


More information will be posted if any more is found.

Comments

Recent Techrights' Posts

Martina Ferrari & Debian, DebConf room list: who sleeps with who?
Reprinted with permission from Daniel Pocock
Europe Won't be Safe From Russia Until the Last Windows PC is Turned Off (or Switched to BSDs and GNU/Linux)
Lives are at stake
Links 23/04/2024: US Doubles Down on Patent Obviousness, North Korea Practices Nuclear Conflict
Links for the day
Stardust Nightclub Tragedy, Unlawful killing, Censorship & Debian Scapegoating
Reprinted with permission from Daniel Pocock
 
Microsoft is Shutting Down Offices and Studios (Microsoft Layoffs Every Month This Year, Media Barely Mentions These)
Microsoft shutting down more offices (there have been layoffs every month this year)
Balkan women & Debian sexism, WeBoob leaks
Reprinted with permission from disguised.work
Links 24/04/2024: Advances in TikTok Ban, Microsoft Lacks Security Incentives (It Profits From Breaches)
Links for the day
Gemini Links 24/04/2024: People Returning to Gemlogs, Stateless Workstations
Links for the day
Meike Reichle & Debian Dating
Reprinted with permission from disguised.work
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, April 23, 2024
IRC logs for Tuesday, April 23, 2024
[Meme] EPO: Breaking the Law as a Business Model
Total disregard for the EPO to sell more monopolies in Europe (to companies that are seldom European and in need of monopoly)
The EPO's Central Staff Committee (CSC) on New Ways of Working (NWoW) and “Bringing Teams Together” (BTT)
The latest publication from the Central Staff Committee (CSC)
Volunteers wanted: Unknown Suspects team
Reprinted with permission from Daniel Pocock
Debian trademark: where does the value come from?
Reprinted with permission from Daniel Pocock
Detecting suspicious transactions in the Wikimedia grants process
Reprinted with permission from Daniel Pocock
Gunnar Wolf & Debian Modern Slavery punishments
Reprinted with permission from Daniel Pocock
On DebConf and Debian 'Bedroom Nepotism' (Connected to Canonical, Red Hat, and Google)
Why the public must know suppressed facts (which women themselves are voicing concerns about; some men muzzle them to save face)
Several Years After Vista 11 Came Out Few People in Africa Use It, Its Relative Share Declines (People Delete It and Move to BSD/GNU/Linux?)
These trends are worth discussing
Canonical, Ubuntu & Debian DebConf19 Diversity Girls email
Reprinted with permission from disguised.work
Links 23/04/2024: Escalations Around Poland, Microsoft Shares Dumped
Links for the day
Gemini Links 23/04/2024: Offline PSP Media Player and OpenBSD on ThinkPad
Links for the day
Amaya Rodrigo Sastre, Holger Levsen & Debian DebConf6 fight
Reprinted with permission from disguised.work
DebConf8: who slept with who? Rooming list leaked
Reprinted with permission from disguised.work
Bruce Perens & Debian: swiping the Open Source trademark
Reprinted with permission from disguised.work
Ean Schuessler & Debian SPI OSI trademark disputes
Reprinted with permission from disguised.work
Windows in Sudan: From 99.15% to 2.12%
With conflict in Sudan, plus the occasional escalation/s, buying a laptop with Vista 11 isn't a high priority
Anatomy of a Cancel Mob Campaign
how they go about
[Meme] The 'Cancel Culture' and Its 'Hit List'
organisers are being contacted by the 'cancel mob'
Richard Stallman's Next Public Talk is on Friday, 17:30 in Córdoba (Spain), FSF Cannot Mention It
Any attempt to marginalise founders isn't unprecedented as a strategy
IRC Proceedings: Monday, April 22, 2024
IRC logs for Monday, April 22, 2024
Over at Tux Machines...
GNU/Linux news for the past day
Don't trust me. Trust the voters.
Reprinted with permission from Daniel Pocock
Chris Lamb & Debian demanded Ubuntu censor my blog
Reprinted with permission from disguised.work
Ean Schuessler, Branden Robinson & Debian SPI accounting crisis
Reprinted with permission from disguised.work
William Lee Irwin III, Michael Schultheiss & Debian, Oracle, Russian kernel scandal
Reprinted with permission from disguised.work
Microsoft's Windows Down to 8% in Afghanistan According to statCounter Data
in Vietnam Windows is at 8%, in Iraq 4.9%, Syria 3.7%, and Yemen 2.2%
[Meme] Only Criminals Would Want to Use Printers?
The EPO's war on paper
EPO: We and Microsoft Will Spy on Everything (No Physical Copies)
The letter is dated last Thursday
Links 22/04/2024: Windows Getting Worse, Oligarch-Owned Media Attacking Assange Again
Links for the day
Links 21/04/2024: LINUX Unplugged and 'Screen Time' as the New Tobacco
Links for the day
Gemini Links 22/04/2024: Health Issues and Online Documentation
Links for the day
What Fake News or Botspew From Microsoft Looks Like... (Also: Techrights to Invest 500 Billion in Datacentres by 2050!)
Sededin Dedovic (if that's a real name) does Microsoft stenography
Stefano Maffulli's (and Microsoft's) Openwashing Slant Initiative (OSI) Report Was Finalised a Few Months Ago, Revealing Only 3% of the Money Comes From Members/People
Microsoft's role remains prominent (for OSI to help the attack on the GPL and constantly engage in promotion of proprietary GitHub)
[Meme] Master Engineer, But Only They Can Say It
One can conclude that "inclusive language" is a community-hostile trolling campaign
[Meme] It Takes Three to Grant a Monopoly, Or... Injunction Against Staff Representatives
Quality control
[Video] EPO's "Heart of Staff Rep" Has a Heartless New Rant
The wordplay is just for fun
An Unfortunate Miscalculation Of Capital
Reprinted with permission from Andy Farnell
[Video] Online Brigade Demands That the Person Who Started GNU/Linux is Denied Public Speaking (and Why FSF Cannot Mention His Speeches)
So basically the attack on RMS did not stop; even when he's ill with cancer the cancel culture will try to cancel him, preventing him from talking (or be heard) about what he started in 1983
Online Brigade Demands That the Person Who Made Nix Leaves Nix for Not Censoring People 'Enough'
Trying to 'nix' the founder over alleged "safety" of so-called 'minorities'
[Video] Inauthentic Sites and Our Upcoming Publications
In the future, at least in the short term, we'll continue to highlight Debian issues
List of Debian Suicides & Accidents
Reprinted with permission from disguised.work
Jens Schmalzing & Debian: rooftop fall, inaccurately described as accident
Reprinted with permission from disguised.work
[Teaser] EPO Leaks About EPO Leaks
Yo dawg!
On Wednesday IBM Announces 'Results' (Partial; Bad Parts Offloaded Later) and Red Hat Has Layoffs Anniversary
There's still expectation that Red Hat will make more staff cuts
IBM: We Are No Longer Pro-Nazi (Not Anymore)
Historically, IBM has had a nazi problem
Bad faith: attacking a volunteer at a time of grief, disrespect for the sanctity of human life
Reprinted with permission from Daniel Pocock
Bad faith: how many Debian Developers really committed suicide?
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 21, 2024
IRC logs for Sunday, April 21, 2024
A History of Frivolous Filings and Heavy Drug Use
So the militant was psychotic due to copious amounts of marijuana
Bad faith: suicide, stigma and tarnishing
Reprinted with permission from Daniel Pocock
UDRP Legitimate interests: EU whistleblower directive, workplace health & safety concerns
Reprinted with permission from Daniel Pocock