Bonum Certa Men Certa

OOXML: Security Flaw Found, Microsoft Lies About It Again, African Revolt Against It, and ISO in Great Danger

It is not looking good for OOXML. Even if it passes the September 2nd test, the wrecks it will leave behind it will be highly damaging not only to Microsoft, but also to those that surround Microsoft.

OOXML Means... Deception



Microsoft systematically lies about OOXML. It does it deliberately. To use a few recent examples, consider this batch [1, 2, 3, 4, 5]. There are many more examples to be found, but they are not quite as 'fresh'. If you thought Microsoft ran out of lies, then get a load of this.

Of course, Microsoft already knows all this, and no doubt that is why they are working so hard to urge NB's to vote "Approval, with comments" with promises that their comments will be addressed at the BRM, a BRM that might not even occur. In fact, if everyone listened to Microsoft and followed their advice then that would almost guarantee that no BRM would be held and no NB's comments would be adopted.


This is another disgraceful case of deception. Microsoft hopes to have its victims razzled and dazzled until it's too later to change the mind.

OOXML Means... Not Secure



In the past, for a variety of reasons, OOXML was said to be unsafe. It's unsafe because of poor digital preservation. It is unsafe because life is in jeopardy. It is unsafe because of untrusted binary macros. It is unsafe because it depends on the existence and direction of one single company. The list could go on and on, but there's a theme here. OOXML is not a safe route for storing one's (potentially vital) documents, history, and work.

If you thought you had seen it all, be aware that an XML-related flaw has just been discovered in Excel 2007.

Bradley Mountford, a digital forensics expert, today discovered a security vulnerability in Microsoft Office Excel 2007 regarding login information of external data sources.


Need anyone be woken up by a louder warning signal? Inelegant formats are bound to become susceptible to abuse. Without reuse, there is plenty of room for mistakes. OOXML is not just buggy, but it is also risky.

OOXML Means... Imperialism



Recall our very recent post about OOXML in the African continent. Reciting some key information:

In response they [Microsoft] have apparently been sending PR teams around to national Standards boards all over the world(Ghana for a fact) to lobby for votes for OOXML under the guise of talking about ‘Open XML Standards’.


Bear in mind that Ghona is actively pursuing Free software, but it's also an easy target for the notorious "exchange of favours/money".

The minister also said that "Ghana's legislators, of which I am a member, use Linux to support the computing facilities at Parliament House".


Here is where the news comes in. It follows the articles (some of which were cited in our previous Africa-tagged post) about Microsoft's abuse through lock-in. Right now, the African civil society is actually courageous enough to warn Microsoft. To paraphrase Pamela Jones (in a different context), Africa is not as ignorant as Microsoft needs it to be.

African Civil Society Organisations (CSOs) may be spoiling for war with the global software giant, Microsoft Corporation, over its bid to have its DIS 29500 'Office Open Extensible Markup Language (OOXML)' endorsed by the International Standard Organisation (ISO).


Miscellany: OOXML Means... The End of Standards



It wasn't long ago that the OOXML petition site posted and posed the 5 famous questions about OOXML.

Here are some 5 simple questions you should get an answer from your Standardisation Body, from ECMA, or from Microsoft...


These questions make it evident that OOXML becoming a standard would be absurd, to say the very least. The Web is filled with new comments about OOXML's progress and here is one that caught my eye:

MS threatens legitimacy of ISO

Microsoft whines they are following the rules. Well, it's also within the rules to fire a competent and cooperative single mother of 4 children and replace her with your drinking buddy. Some rules.

ISO will commit suicide if OOXML becomes a standard as it is now. But maybe that's what Microsoft wants.


Closing a loop here, in reference to the issue of OOXML and safety, have another look at what Rob Wier said last week. It's the conclusion in an essay whose title was "Is it [OOXML] safe?" (highlight in the quoted text is ours):

The tragedy of this is that for so many NB's, with talented technical committees, the discussion of OOXML has failed to be a technical evaluation, but has quickly become a political game, where committees are stuffed, governments are pressured, billionaires call in favors, competitors blocked from participation, voting rules ignored or modified at whim, etc. All we can do is stand by and watch as Microsoft takes over JTC1. The cost to Microsoft will be great, but so much greater is the cost to JTC1. What will it mean for JTC1's future to be known as a body that does not follow its own rules, does not evaluate proposals on technical merits, but has procedures so weak and poorly written that it allows itself to be taken over by a single company? Quis custodiet ipsos custodes?

Recent Techrights' Posts

Linux Foundation is Plagiarism Hub, Linux is at Risk From It
Torvalds never looked weaker and more compromised
It's Inevitable Anyway, So...
of course blame Chinese Communists for the "anti-AI" messages
Giving 'Free Publicity' to the People You Hate and Attack
Be careful what you wish for in social control media
 
Links 03/09/2026: John Ternus Enters Apple Amid Mass Layoffs, Journalist İrem Delice Arrested
Links for the day
Stallman.org Down Due to Virtual Machines Issue, "Senior Engineers are Investigating the Issue" Since Saturday
RMS site down due to virtual machines issues upstream
Gemini Links 03/09/2026: Back in Japan, Another New Year, Reasons to Avoid Have a "Smart" "Phone", and Rant About Built-in Batteries
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 02, 2026
IRC logs for Wednesday, September 02, 2026
Identi.ca is Practically Dead, Just Like All Social Control Media (Eventually)
All Social Control Media is a waste of time
Gemini Links 02/09/2026: Intentions, Publishing on Workstations, and Connectivity Standards Alliance (CSA)
Links for the day
GNU/Linux Reaches 6% in Nepal
Today I checked GNU/Linux in Nepal again
SLAPP Censorship - Part 169 Out of 200: Calling People "Nazis"
'Cancel culture' in action
GNU Turns 43 This Month, GNU/Linux Turns 35 Next Year
It seems like no area of computing has not been impacted by the GNU/Linux revolution
Uber Debt Grew 2.5 Billion Dollars in 3 Months, Company Lays Off at Least 10% of Workforce
The media repeats the "official" numbers
Links 02/09/2026: The Machine Stops, AuraSearch, and DOOM 1/2
Links for the day
1-1 Meetings at IBM This Week, PIPs Expected, Maybe RAs Too
As usual, we invite whistleblowers to tell us what's going on
Links 02/09/2026: Germany Blames Russia for Leipzig Airport Drone Attack and China Gains Power as US Faces Humiliation in the Midst of Presidential Cover-up
Links for the day
Quit Talking About "AI Layoffs" and Talk About How Chatbots and Other Bots Broke Recruitment Processes by Cheating
Bots talking to other bots isn't HR; it's a catastrophe
Robotics Isn't "Hey Hi", Robotics Isn't New Either
Is the official Arduino blog becoming shilling platform for Qualcomm's "hey hi" [so-called 'intelligent'] chips?
Today We'll Focus on Growth of GNU/Linux
We've meanwhile noticed that Clownflare statistics for north American nations show 19% of requests (CDN) originating from GNU/Linux
IBM Secret (or Silent) Layoffs in September 2026
We need whistleblowers
Gemini Links 02/09/2026: GAFAM's E-mail Cartel, ROOPHLOCH 2026, and Homeworlds
Links for the day
Not Only Microsoft and IBM Hide Layoffs (Secret Layoffs) and Fail to Follow the Law (or Bypass It)
Microsoft's tactics are not so unique
People Who Participate in the Slop Plagiarism Pyramid Scheme and the Moral Dilemma (What's Acceptable for a Salary?)
giant pyramid scheme
State of the Slop, Linux Edition
Whether slop about "linux" becomes rarer by the end of this year, well... time will tell
Links 02/09/2026: 'Open' 'AI' (Proprietary Slop Plagiarism) Destroying Evidence, "Data Center Backlash Has Officially Rattled Scam Altman"
Links for the day
Andrew Lee Has Turned Freenode Into a Slopfarm (Because Who Needs IRC Anyway?)
The site is churning out slop all day long
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 01, 2026
IRC logs for Tuesday, September 01, 2026
FSF Staff Uses 'CoC' to Stop Conversation About Autistici/Inventati in Relation to Free Software
The list is already heavily moderated
IBM Allegedly Stopped Hiring (This Tends to Coincide With Mass Layoffs)
Is a hiring freeze an echo of layoffs? Yes, definitely.
SLAPP Censorship - Part 168 Out of 200: When Choosing Clients Recklessly and Poorly Self-Harm is Inevitable
"If you're doing something hard and nobody hates it, you probably aren't doing it. If the right people hate it and those people happen to be some of the worst people alive, so much the better."
Something Big is Happening at IBM This Week/Month
Some people at IBM (and Red Hat) are panicking
Gemini Links 01/09/2026: Biscuits, Epstein Files, Power Users, and Alhena 5.6.8
Links for the day
Links 01/09/2026: Almost 5,000 Missing/Dead in Nepal-China Flood and Marijuana Factory Explodes
Links for the day
September at IBM: Silent Layoffs on Day 1
PIPocalypse at IBM
Last Month IRC Entered Its 39th Year and It's Still Growing (New IRC Networks)
There are 511+ known IRC networks
Links 01/09/2026: Climate, Disinformation, Microsoft Overworking People
Links for the day
Richard Stallman's Site Still Offline (Third Day), But Richard Stallman is Active Online
he is busy online despite his site not being accessible so far this week
PIP Layoffs at Microsoft, Even in India
Microsoft is trying to hide the true scale of the layoffs
Layoff Trackers Are a Sham, They're Like US 'Unemployment Data'
Layoff trackers are similarly misleading as they only measure what companies openly admit and register with WARN notices
The Peculiar Case of OSNews, Which Experiments With Slopfarming
It wasn't published in error. It has been there for two months.
Russian Federation is Removing Windows From Computers
Windows is going "out of fashion"
XBox CEO Has No Clue What She is Selling
Some people believe Microsoft will parcel and offload the whole "gaming" unit to some other companies
analognowhere.com and xkcd.com Selling Physical Copies of Webcomics
That's one way to support their work
PIP/GVSA at Microsoft: Mass Layoffs Disguised as Something Else
Microsoft is trying to cheapen the workforce because the numbers don't add up
Microsoft Lunduke Uses Twitter ("X") Because It's Algorithmically Designed to Boost His Worldview/s, He Ignores What "X" Is
Maybe all those people really deserve one another
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, August 31, 2026
IRC logs for Monday, August 31, 2026
Censorship by Threats
It should be noted that the Web site of Richard Stallman will soon enter its third day of downtime
In Romania, GNU/Linux Reaches 6%, According to Clownflare
Tomorrow we'll see the latest data from statCounter (for September)
Gemini Links 01/09/2026: Denali Park Train Trip, Crafts, and Community-Building in smol.pub
Links for the day
Microsoft Workers Doing 80 Hours a Week After Microsoft Culled Their Colleagues
there are days when they work 17 hours a day (barely any time left to sleep and eat) and work starts at 5AM
IBM Defrauds Shareholders With Fake News (Bribed Press) About "Quantum"
That says a lot about the state of "Tech Giants" and also the utterly shameless state of the media
Record Highs for GNU/Linux, Especially in the United States of America
the "market share" of GNU/Linux is about 9%, still about a third of what Vista 11 stands at