Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

IBM CEO Says IBM is Just Reliant on Buzzwords That Are Overhyped
IBM has nothing to show anymore and telling fairytales to shareholders is a temporary 'fix'
The "Alicante Mafia" - Part XI - No Comment From Steve Rowan, Niloofar Simon, and Christoph Ernst About Cocaine Inside EPO
What kind of patent office is this?
Giving a Voice to the Community (Even When It's Inconvenient or 'Scary')
Once upon a time we were threatened with deplatforming for merely reposting articles by Daniel Pocock; we no longer have this problem
 
Fake IBM Retirements (IBM Gives Older Workers Ultimatums, Deadlines, and Carrots on Sticks)
As they point out, IBM is desperate to lower costs
Linuxiac is Basically a Fake News Site, But It's Being Fed by Google News
Because Google News is run by Google, a slop pusher
Links 25/01/2026: Slop "Tribalism", Nike Apparently Cracked
Links for the day
Claims That PIPs Are Abused for Silent Mass Layoffs at IBM (Without Severance) or Forced Retirements
Performance Improvement Plans (PIPs) "clearly bogus as everyone on my team who has been on one has been fired"
WebM Version of Richard Stallman's Latest Talk (Georgia Tech Talk)
The file size is smaller
After Half a Decade Vista 11 is Still a Giant Failure
Don't expect Microsoft to gain a foothold
Details on IBM Layoffs in the EU Last Week, Same Allegedly Coming to the US Shortly
"Around 50 people affected in Belgium."
Technology Trends Driven by DRM Giants, Planned Obsolescence, Not the Needs of the Buyers
The "pushers" think of customers as "users"; and they encourage passivity, Stockholm Syndrome
Links 25/01/2026: Microsoft BitLocker Backdoored for Decades Already, Microsoft-Backed ICE Still Murders Civilians
Links for the day
Gemini Links 25/01/2026: "Expert in a Dying Field" and Global Commands
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, January 24, 2026
IRC logs for Saturday, January 24, 2026
After the Slop Bubble
At the end, looking back, we'll all generally understand that the net effort of slop was environmental destruction
Projection of Fanatic From Microsoft
Microsoft Lunduke is pandering to the 4Chan 'crowd'
Digg.com (Digg) is a Censorship Platform, Just Another Social Control Media/Network, Controlled by the Few
We are not going to bother with any social control media
Spam, Slop, and Fake 'Articles' Regarding "Linux"
Serial Sloppers like these are harming real reporting about Linux and GNU
Rape investigation dropped: Will Fowles & ALP transgender deception
Reprinted with permission from Daniel Pocock
Diversity, Grooming & Debian transgender Zero
Reprinted with permission from Daniel Pocock
Pauline / Maria / Alice Climent(-Pommeret) & Debian transgender offensive cybersecurity deception
Reprinted with permission from Daniel Pocock
Did judge with transgender sister & Debian conflict of interest help cover-up a death?
Reprinted with permission from Daniel Pocock
Links 24/01/2026: CBS News Demolished From the Inside and Many Publishers Admit Layoffs
Links for the day
Gemini Links 24/01/2026: Dreams and Raspberry Pi Zero 2W
Links for the day
Richard Stallman's First Talk in US College Since 2018: Videos and Photos
There are some backstories
Judge Richard Oulevey (Grandcour Choeur, Tribunal Vaud) & Debian shaming abuse victims and witnesses
Reprinted with permission from Daniel Pocock
Judgment: French army vanquishes German FSFE on Hitler's birthday, Microsoft contract dispute (1716711)
Reprinted with permission from Daniel Pocock
EDPB/CNIL privacy expert Amandine Jambert (cryptie, FSFE) implicitly admitted lying about harassment when she resigned admitting conflict of interest
Reprinted with permission from Daniel Pocock
Links 24/01/2026: TikTok Controlled by Alt Reich in US Now, White House Shares Fake, Manipulated, Misleading Images Already
Links for the day
Projection Tactics - Part IV: SLAPP by Americans Against Techrights (UK) to Hide Serious Abuses Against American Women
"PRs need to stop being complicit in suppression of information via SLAPPs"
Dirty Laundry at Debian and Elsewhere
We cannot just brush aside real issues involving real people and their families
Illegal, Unconstitutional Kangaroo Court for Patents Drops the Masks, Shows Its Real Purpose is to Serve Multinational Monopolists and Crush European SMEs
Europe (or the EU) is rapidly becoming a corporate project, not a unified governance initiative
The "Alicante Mafia" - Part X - EPO Strikes to Begin Next Week
Things gradually escalate this month
Gemini Links 24/01/2026: Snow, Boxing, and Lisp is Fun
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, January 23, 2026
IRC logs for Friday, January 23, 2026
Senior management and HR email privacy: Martin Ebnoether (venty), Axel Beckert (xtaran) & Debian abuse in Switzerland
Reprinted with permission from Daniel Pocock
Pierre-Elliott Bécue, ANSSI & Debian cybertorture
Reprinted with permission from Daniel Pocock
MJ Ray, Micah Anderson & Debian on drugs, prostitution at DebConf6 fight
Reprinted with permission from Daniel Pocock
Excellence in Ethics: a list of victories for the truth
Reprinted with permission from Daniel Pocock
Richard Stallman Giving Public Talk, Answering Questions From the Audience
We understand (from the organisers) that there will be a video of the talk
Forbes Covers in 2026 What Was Already Clear for Over a Decade: Microsoft's BitLocker 'Encryption' is a Back Door
One that's promoted by the loudest boosters of UEFI 'secure boot' as well
The Grapevine Says IBM's American RAs (Mass Layoffs) Soon to Follow European RAs, PIPs and "Reviews" as Pretext for a Likely Baseless Dismissal
The days of honourable corporations and work ethics are long gone it seems...
Links 23/01/2026: Minus 24 deg C in South Korea, "Iran Internet Blackout Passes Two-Week Mark"
Links for the day
Gemini Links 23/01/2026: "Witch Watch" and English on the Net
Links for the day
Reminder That "Linux" in the Site's Name (and Domain) Does Not Imply Authentic Journalism About GNU/Linux
the sad fact that some once-legitimate sites became slopfarms
Further Comments Illuminate Observations Regarding IBM's Layoffs (RAs) Plan for Europe
Some shed light on the expected scale
Links 23/01/2026: Growing Censorship, Intel Falls (Another Bubble, Propped Up by Cheeto Bailout), and Huge GAFAM Layoffs Continue
Links for the day
Working for Freedom Makes You a Target
it's not about what you do but about who gets served
Appeasing Bullies Doesn't Work
The reason we're still here and very active is that we're good at what we do
Claim That IBM Mass Layoffs Began Again in Europe, With Rumours It'll Close Offices
Unless IBM issues a statement (admission) to the media or issues WARN notices (in the US), the lousy media will simply assume - however wrongly - that nothing is happening and there's nothing to report
How Microsoft Will Tell Shareholders That the Business is Failing in a Few Days
It'll resort to "AI" storytelling (lying about slop having potential for some unspecified future year)
Flying to See Today's Talk by Richard Stallman
It's probably not too late to reserve a seat for today's talk
The Fall of Freenode Didn't Kill IRC and the Web's Issues (Not Limited to LLM Slop) Didn't Kill Everything
As long as there are enough people willing to keep the simple (or "old") stuff it'll refuse to die
GAFAM Layoffs by Performance Improvement Plans (PIPs) Hide the Real Scale of Their Financial Troubles
the "official" numbers of layoffs will never tell the true story
'Domesticated' Animals Not More Valuable Than Free-range Wildlife, Proprietary ('Commercial') Software Isn't Better Than Free Software
the proprietary software giants (companies like SAP or Microsoft) have a lot of lobbyists
The "Alicante Mafia" - Part IX - EPO Budget Funnelled Into Cocaine and Moreover Rewards Cocaine-Addicted Management for Getting Busted by Police
Any day that passes without European media and European politicians doing anything about it merely discredits the media and the EU (or national governments)
Richard Stallman Won't Talk About "AI", He'll Talk About Chatbots and LLMs Lacking Any Intelligence
This really irritates people who dislike the message; so they attack the person
Slopfarms Still Fed by Google, Boosting Fake 'Articles' That Pretend to Cover "Linux"
At this point about 80-90% of the search results appear not to be slopfarms
Gemini Links 23/01/2026: The Danish Approach to Deepfakes and Random vi Things
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, January 22, 2026
IRC logs for Thursday, January 22, 2026