Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Newer is Not Better, Lunar Edition
Maybe in 57 years (2083, after all these wars) we'll managed to launch a capsule with a human and a dog above the stratosphere again
 
IBM Insiders Say What's Wrong With IBM in Albany (and Yes, There Are Layoffs)
promotions boil down to what insiders now call "brown-nosing" and nepotism
After Killing OpenSource.org IBM Together With OSI Told Us It Would Carry on OpenSource.net, But the Site Has Been Essentially Dead for 9 Months (Effectively Abandoned)
OpenSource.org has been dormant for 4 weeks already and OpenSource.net last had a new page 9 months ago (it'll be 9 months tomorrow) [...] That's IBM in a nutshell
A Lot of What Happened to OSI is Because of Reporting by Techrights
Half a year since Stefano Maffuli (Executive Director) "left"
Public Presentations by RMS Hardly Interrupted Anymore
We'll carry on covering those sorts of topics throughout the year
Links 07/04/2026: US Wants to Put Journalists in Prison for Reporting Facts, Artist ‘Bale’ Arrested Over Rape Allegation in Social Control Media
Links for the day
To IBMers, IBM Has Failed and is Fast Becoming a Book of Jokes and One-Word Punchlines
How else can one make it obvious that IBM is circling down the drain?
"AI Revolution" Was a Lie: Microsoft CEO Admits What He Calls "AI" is Sometimes Sloppy and Microsoft Admits That Slop is for "Entertainment Purposes Only" (Not for Any Serious Work)
if it gets "memory-holed", we can bring it up again and again
Social Control Media is Not a Viable Business Model
The future of the Web might not be the Web
From Datacentres Boom to Actual Booms That Target Datacentres, Now Struggling to Justify Humongous Energy and Water Consumption
Datacentres that are used for mindless "entertainment" (as Microsoft calls it) like slop are not a priority at this time
Gemini Links 07/04/2026: Aircraft Lift Force, Editor History, and Consumer Hardware Stagnation
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 06, 2026
IRC logs for Monday, April 06, 2026
What Matters is Software Freedom, Not the Brands
The important thing is to speak about Software Freedom
Wikileaks is About to Turn 20
~2 days ago it turned 19.5
The Cloud of Smoke
Will 2026 be the year that "The Cloud" openly confesses the risks it brings about?
SLAPP Censorship - Part 36 Out of 200: Claim KB-2024-003529 in a Nutshell (Microsoft Employee Does Terrible Things, Then Sues the Reporter in Another Continent)
It commences with more of an overview
Gemini Links 06/04/2026: Solar Panel Story and Centralisation
Links for the day
"Free Speech, Free Press": What the World Needs to Improve
Darkness breeds corruption
IBM prioritises a "lot of smoke and hype and use of trending buzzwords"
IBM can pretend all it wants things are fine
GAFAM Paying the Price for Pursuing US Military Money (Taxpayers' Money as 'Stimulus' With Strings Attached)
The "cloud" in cloud computing is a cloud of smoke
Observing Slop's Demise
If energy becomes more scarce, then one rare/side perk (or upside) will be slop companies screaming for lifeboats
Links 06/04/2026: Crackers Breached the European Commission, Why "Old Way of Campaigning Won’t Cut It Anymore"
Links for the day
Enron Versus NVIDIA (the Cost of Circular Financing, or Funding Your Own Customers to Buy Your Products) - “The Inventory Paradox” or “The Vibe Revenue Admission”
Round-tripping (finance)
You Know "The Economy" is Fake When 6 Months After Oracle Says Debt-Saddled 'Open' 'AI' (Slop) Will Pay It $300,000,000,000 Oracle Says It Must Lay Off 30,000 Workers at 6AM
Oracle is in deep debt, which increased at a pace of almost 4 billion dollars per month lately
Free Software Will Outlive GAFAM
GAFAM is overhyped
Techrights Was Further Decentralised Three Years Ago
In 2020 we began working on IPFS stuff
The Military Attacks on Dubai Internet City as Reminder That GAFAM Isn't Safe (Disregard the "Nobody Gets Fired for Buying GAFAM" Mindset)
These are all realistic and foreseeable scenarios that GAFAM sceptics have long warned about
The Wars Aren't Ending, Now We See GAFAM Facilities Being Bombed
This is becoming a tech issue
Links 06/04/2026: Turning 34, Throwing Things Away, and Printing in GNU/Linux
Links for the day
Links 06/04/2026: Ex-Microsoft Engineer Explains Why Azure Fails, Germany Prepares for War
Links for the day
EPO "Cocaine Communication Manager" - Part XI - EPO Strike Enters Its Second Week, EPO Sheds Off Qualified Staff to Make Way for Nepotists
More than six months ago the "Cocaine Communication Manager" got arrested for cocaine use
Another Microsoft Outlook Downtime
Microsoft has sloppy code, it's not something suitable for mission-critical things
Week 2 of April IBM Layoffs Accelerate Based on Rumours
"Heard about Layoff at IBM"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 05, 2026
IRC logs for Sunday, April 05, 2026
Culture of Harassment Inside Microsoft, Says Former Director at Microsoft
listen to Microsoft insiders
Drone Strikes on Amazon (GAFAM) Datacentres Highlight Azure's Miniscule Share
Azure is failing
SLAPP Censorship - Part 35 Out of 200: How to Make ~10,000 Pound Sterling (13,220.50 United States Dollars) by Copy-Pasting and Editing 10 Pages
Today it's Easter Sunday, so we'll keep this part relatively short
Gemini Links 05/04/2026: Artemis II Mission Tracker, Meditation on Copyright, Alhena 5.5.5, "Gemini as the Final Frontier of Human Cognition"
Links for the day
Microsoft Windows Falls to All-Time Low of ~60% in Switzerland, GNU/Linux Among Top Gainers
What will it take for mainstream media (not just geeks' site) to cover it?
Mainstream Media on "Practical Survivalism"
Suffice to say, panic buying begets more panic and price surges
Cloud Computing as a Cloud of Smoke (Your Hosting Provider is a "Legitimate" Military Target)
When a French datacentre went up in flames people joked that the "cloud" meant a cloud of smoke
Andreas Tille Congratulates Sruthi Chandran Before the Election for Debian Project Leader (DPL) is Even Over
Andreas Tille, the current Debian Project Leader (DPL) who has been in this role for nearly 24 months
When You Try to Change the World for the Better and Somehow They Find a Way to Say You Are the Villain
Don't be a fool. Don't fall for inversions of narratives.
Slop Was a Flop and Energy Crisis Will be Slop's Final Blow
Today we see no slopfarms in Google News
Links 05/04/2026: "Taiwanese Airlines to Hike Fuel Surcharges 157%" and Openly Racist Voter Suppression Starts in the US
Links for the day
Gemini Links 05/04/2026: Playing with Hyprland and Migrating Antenna Filters
Links for the day
Links 05/04/2026: "Confidential Computing" as Proprietary Bundle of False Promises and "The Web Is an Antitrust Wedge"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 04, 2026
IRC logs for Saturday, April 04, 2026