Slashdot Mirror


Microsoft Prepares Office Lock-in

An anonymous reader writes "NEWS.COM has an article describing Office 2003's DRM features for documents. This will not only coerce those running older versions of Office to upgrade, which has been a problem for MS in the last few years, but it will also shut out competing software, such as OpenOffice. Now think about this for a second. Even if the developers of a competing office suite could figure out how to get their software to open an Office 2003 document, doing so would be a DMCA violation, since they'd be bypassing an anti-circumvention device. I certainly hope the OpenOffice team will kick development into high gear. If there was a time we need a viable competitor to Office, it's now."

237 of 1,127 comments (clear)

  1. The straw that broke the PHB's back? by mao+che+minh · · Score: 4, Interesting
    This may actually signal the beginning of the end of the monopoly. People have always speculated that widespread damnation of DRM technologies will only occur once a major manufacturer, such as Microsoft, uses it to blatantly direct the consumer to spend money that they really didn't intend on spending. It goes hand in hand to suppose that the said company will become a major target for customer disdain, and the act will make them infamous as "the first". The spin that the media can place upon such a story will be catastrophic to the companie's image. And Microsoft will have no where to hide, because it no longer only be the geeks that are tasting the effects of the monopoly.

    Just imagine the backlash that will come from inter-company communication via Excel and Word. Hell, my company has had numerous problems with reporting (scripts that mine data from various sources, such as Excel, and generate reports) and document management systems just because of differences between Excel/Word 97 and 2000 files. This may be what FOSS needs to start making massive market penetration.

  2. Hmph! by Talia+Starhawke · · Score: 5, Funny
    That's it, I'm getting out my typewriter. I'll pound out my reports old school, like Hunter S. Thompson still does.

    Who's with me?

    Anyone?

    --
    +5, Female ;)
    1. Re:Hmph! by Gr33nNight · · Score: 5, Funny

      What are these 'type writers' you speak of? Are they like mini laptops?

  3. out of the water by NetMagi · · Score: 2, Insightful

    With this coming at the same time that linux seems to really be taking a foothold. .at least in the corporate desktop I think people fed up with MS BS may finally start to do something about it.

    1. Re:out of the water by garcia · · Score: 5, Insightful

      First of all, DRM wouldn't be a requirement for all documents, it would most likely be a "feature".

      Second, what the hell does Linux have to do w/Anti-DRM and people switching? Linus has specifically stated that he has no opinion either way. If you want it, woo, if not, woo. People aren't sick and tired of DRM and it's not BS (no matter what "we" think)

      Linux is taking a foothold because other software companies have expensive software.

      You think that an alternative to Office is going to help? There have been alternatives (Corel, etc) did it matter? Do you think because they are creating a new version of Office it will render the other files incompatible? That would be really really dumb for MS to do (no ability to bring in your old stuff? retype? what?)

      The only reason for a switch is PRICE. Honestly, no matter what bullshit people spread on here about how good OO, SO, etc, are, they aren't what MSO offers. Not even close.

      Until the OO, SO, etc, get some strong following and somehow create something better than Office, no one is going to care unless it is money related and even then, I doubt a few hundred dollars is going to matter...

      Just my worthless .02

    2. Re:out of the water by jedidiah · · Score: 2, Insightful

      Like much of what Microsoft comes up with (or steals), this seems to be something that started out as a reasonably good idea and then got ruined by Microsoft management. A generalized document/file security & decryption service actually makes some sense. However, there's no reason to limit yourself to msoffice files when considering sensitive corporate data. So instead of making something that might be generally useful to everyone, they decide instead to make this service a club that they can use to force people to buy crap they don't really want.

      The Free Software community should respond with a more generalized version of this concept and make it callable/embedable module that can be used for ANY corporate data and not just spreadsheets.

      --
      A Pirate and a Puritan look the same on a balance sheet.
  4. Office lock-in? by AtariAmarok · · Score: 5, Funny

    As long as there is enough room under the door to shove a thin-crust pizza under it, I'm game.

    --
    Don't blame Durga. I voted for Centauri.
    1. Re:Office lock-in? by kfg · · Score: 3, Funny

      You'll also have to convice Jolt to package in a handy pouch, or cut a three inch hole in the door.

      KFG

    2. Re:Office lock-in? by Crispy+Critters · · Score: 3, Funny
      "You'll also have to convice Jolt to package in a handy pouch, or cut a three inch hole in the door."

      If you're drinking all that Jolt, you might want to make that two three-inch holes.

  5. I swear... by DeathPenguin · · Score: 3, Funny

    Next person to say something like "They made very sure that Office has these features that nobody else has" without specifying a single damn feature is getting slapped upside the head with a wet trout.

    Whenever I ask people why they choose MSWord over a competing product, I always get the same answer: "It has more features." Feature like what? Ten different versions of "Clippy?" No wonder MS has the word procsessing industry in a kung-fu grip.

    1. Re:I swear... by Bingo+Foo · · Score: 5, Funny

      All web forms get automatic spell checking under OS X, with no third party app required.

      Grammar the other hand is no proper checking way.

      --
      taken! (by Davidleeroth) Thanks Bingo Foo!
    2. Re:I swear... by in7ane · · Score: 3, Offtopic

      An important feature is the VB scripting in Excel, at least for me, and being able to issue commands to other applications from within these scripts. This may very well be ignorance on my part - but is there anything else that would allow to do this as easily?

      This is for QUICK and EASY scripts - so don't tell me to use something I can't record scripts directly in and easily debug (if I want powerfull I'll code it in C). Also, it would be nice if it ran on Windows and Mac without modifications to the scripts.

      However I guess these features will be of little use to me once I can't have access to my Excel files/scripts unless I pay a hefty license fee to Microsoft every year.

    3. Re:I swear... by molarmass192 · · Score: 3, Insightful

      Integration with Excel
      Integration with Powerpoint
      Integration with Outlook, and by extention,
      Integration with Exchange


      All of which are irrelevant if you're looking to replace MS Office in the first place.

      How about perfect compatibility with everyone in the business world.


      You haven't exchanged docs between Office 97 and Office 2K much because there are plenty of incompatibilities that arise between the two without even counting document corruptions.

      --

      Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws-Plato
    4. Re:I swear... by soft_guy · · Score: 2, Insightful

      Track changes, adding comments, tables, creating templates for various purposes, outline views, etc.

      Its not that anyone uses every feature, but every feature is someone's favorite, and they cry if it isn''t there.

      One place where I worked had one guy who knew a lot about Word and his job was to create all kinds of templates for everyone else. There was all kinds of junk that we ended up using regularly that I don't even know how to use unless it is in his template.

      --
      Avoid Missing Ball for High Score
    5. Re:I swear... by lymond01 · · Score: 2, Funny

      An important feature is the VB scripting in Excel, at least for me, and being able to issue commands to other applications from within these scripts.

      You and all the other hackers, bub. ;-)

    6. Re:I swear... by blibbleblobble · · Score: 2, Funny

      "An important feature is the VB scripting in Excel, at least for me, and being able to issue commands to other applications from within these scripts."

      Who would contemplate a spreadsheet whose [autoexecutable] macro language doesn't include a function to restart the computer without saving data?

  6. Interoperability is protected by DMCA by TrentC · · Score: 5, Informative

    For those of you who like to throw DMCA around like a big, evil boogeyman, last time I checked, reverse-engineering for the purposes of interoperability is allowed by the DMCA.

    Jay (=

    1. Re:Interoperability is protected by DMCA by Fareq · · Score: 5, Informative

      that is correct, however OpenOffice (or any other similar product) would have to support all the DRM features that MS Office did.

      If it was possible for a user who shouldn't have access to a file to use another application to read it, then that app would be in violation of the DMCA because it is a circumvention device.

      If it respected all the DRM nonsense, then it would probably fall under the interoperability portion of the law. At least that's the way I read it.

    2. Re:Interoperability is protected by DMCA by bwh265 · · Score: 3, Insightful

      strictly speaking your right, but.. (or is it butt? ;)) the DMCA allows slapdown letters first, and litigation to prove, in court, with lawyers and other expensive accoutrements, that you are legally allowed to do what you did.

      The DMCA is not based on the criminal code assumptions of innocence until proven guilty, rather you must prove that the infraction (and reverse engineering IS an infraction) is explicitly permitted within the code.

      bwh

    3. Re:Interoperability is protected by DMCA by raju1kabir · · Score: 2, Informative
      For those of you who like to throw DMCA around like a big, evil boogeyman, last time I checked, reverse-engineering for the purposes of interoperability is allowed by the DMCA.

      That must come as a tremendous relief to the people who distributed DeCSS source code for watching DVDs under Linux.

      --
      "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
    4. Re:Interoperability is protected by DMCA by Algan · · Score: 3, Interesting

      Yeah, try to create an open source DVD player for Linux. Ever heard of DeCSS? Fact is in real life, the big corporations will sue your ass if you ever try this. Even if you're in the right, do you have the money for legal defense?

      --
      If con is the opposite of pro, is Congress the opposite of progress?
    5. Re:Interoperability is protected by DMCA by dan+dan+the+dna+man · · Score: 3, Interesting

      Although they will still arrest you and invoke the DMCA because maybe you design something that facilitates Adobe ebook and Adobe Acrobat Reader interoperability ;)

      --
      I don't read your sig, why do you read mine?
    6. Re:Interoperability is protected by DMCA by thelexx · · Score: 4, Interesting

      Since you mention the evil ebook, I must rant, fuck my karma:

      I have just been bitten by an ebook wielding website that I subscribed to before realizing the format they used. It required rebooting into Windows, using IE and installing Acrobat 6 to even download the data from their site. Acrobat 6 blocked most attempts to print to pdf etc, but I finally got PS output by installing an HP PS printer on the FILE: port. ps2pdf under Linux refused to convert the file citing redistillation not allowed. I'm hoping good old ghostscript will work, but I will have to tinker with that later tonight. In short, it's been a MAJOR PAIN IN THE FUCKING ASS to use a portion of a book that I have paid money for outside of a single program made by a single company on a single OS on a single PC. Welcome to DRMworld.

      This shit will almost certainly hurt MS in the long run. That's the _only_ beauty in it that I can see so far.

      --
      "Gold still represents the ultimate form of payment in the world." - Alan Greenspan, 1999
    7. Re:Interoperability is protected by DMCA by Fareq · · Score: 2, Interesting

      very close...

      about the Microsoft not being the copyright owner, you have an interesting point that I hadn't considered. That makes things complicated beyond my understanding of this law.

      When you purchase a DVD you have the right to watch the movie and special features contained on that disc, and install and run any "enhanced DVD" software on one computer.

      Additionally, you have the right to give up all your rights and transfer them to another individual.

      A DVD player is able to decrypt the DVD using a complicated algorithm to determine the encryption key.

      DVD players are NOT circumvention devices for a very important reason:

      They have entered an agreement with the DVD copyright holder (or, in reality, its authorized agent) to be allowed to access the disk for the single purpose of playing DVDs in the manner that the copyright holder allows.

      Remember that the encrypted disk / decrypting DVD player combination together make up the "access control scheme" that controls who can do what with a DVD where and when.

      The DMCA does not say that it is not permissible to create a device capable of accessing a protected medium, but that nobody may create a device which circumvents an access-control scheme.

  7. Excellent by BoomerSooner · · Score: 4, Interesting

    Now all Sun needs to do is release an OS X native version, add a database that works more like Access (maybe php or jsp scripting) and MARKET THE HELL OUT OF IT.

    1. Re:Excellent by weston · · Score: 4, Interesting

      If we're relying on Sun to do save the situation, we may as well all preorder our DRM'd Longhorn-only boxes right now. Everything I've been led to believe by talking to a Sun engineer I know who actually used to work on the OS X native port of the project is that Sun simply does not have it together enough to do this right -- they just don't know how to do product development or product management or marketing for applications.

  8. Comment removed by account_deleted · · Score: 4, Insightful

    Comment removed based on user account deletion

  9. Mostly FUD by Anonymous Coward · · Score: 5, Insightful

    This article emphasizes the role of DRM in commercial settings. It's perfectly reasonable for corporate customers to want to control access to their documents in the workplace, and that's what the Office 2003 DRM features are targeted towards. It's just a dumb client-server authentication scheme, people.

    Put away the aluminized headgear. This is not an anti-consumer technology, or even a consumer-oriented one.

    1. Re:Mostly FUD by letxa2000 · · Score: 4, Interesting
      This article emphasizes the role of DRM in commercial settings. It's perfectly reasonable for corporate customers to want to control access to their documents in the workplace, and that's what the Office 2003 DRM features are targeted towards. It's just a dumb client-server authentication scheme, people.

      Yes, and as such it seems entirely stupid. So the executive flying to L.A. won't be able to access the documents while on a 4-hour flight. Nor will he be able to do so from the hotel unless they open up the firewall to let him access the authentication server--something that seems inherently dangerous considering it's Microsoft we're talking about. Employees may not be able to work from home or in the evening for the same reason. If you send the document to an external consultant or a client it's going to be a major hassle to give them access--short of saving a version with no access restrictions.

      If Microsoft is going to implement DRM in their Office platform, this is the way we want them to do it. It seems like a pretty stupid way to implement it that's going to cause more problems than it's going to solve. And if by implementing this DRM and showing consumers just how inconvenient it is the consumers learn that DRM is not their friend, all kind of Microsoft plans may go down the toilet.

    2. Re:Mostly FUD by Martin+Blank · · Score: 5, Insightful

      So the executive flying to L.A. won't be able to access the documents while on a 4-hour flight. Nor will he be able to do so from the hotel unless they open up the firewall to let him access the authentication server--something that seems inherently dangerous considering it's Microsoft we're talking about.

      Do you think MS doesn't even use their own software? Their executives spend a lot of time jetting around the world for various reasons, be they business, lobbying, or vacation. I doubt they would be so short-sighted as to not put some method of permission caching in place. Personally, I see this being used in corporate law departments and in R&D divisions, where the ability to lock people out of something even if they do have possession of it would be invaluable.

      Besides, if it's hard to use or if there's not a real need for it, people simply won't use it. A lot of features get his treatment -- how many places do you know of that have even tried to implement the shared editing features?

      --
      You can never go home again... but I guess you can shop there.
    3. Re:Mostly FUD by tambo · · Score: 4, Interesting

      Permission caching? Isn't that self-defeating?

      Most corporate-secret theft or destruction cases are an inside job. Competent IT staff (such as the kind that companies large enough to have valuable secrets can afford... not that they do, but they *can*) can, reasonably well, lock down a network from intrusion.

      The much harder, and more common, problem is with ex-employees or unfaithful employees sending documents and secrets to competitors. Any scheme intended to squelch this is entirely defeated if permissions are cached.

      - David Stein

      --
      Computer over. Virus = very yes.
    4. Re:Mostly FUD by Skapare · · Score: 5, Insightful

      In order to ensure that older versions of Office or Word cannot read a DRM restricted document, they have to make it "incompatible" in some way. If they do that by having a few fields that will choke older programs, it still won't do anything to prevent developers of other office productivity software from making it readable in theirs. So Microsoft will almost certainly have to encrypt the document, and serve up the key from the DRM server (using a proprietary protocol, of course). That encryption is involved makes it the kind of rights-restricting scheme the DMCA makes illegal to re-engineer. And don't think Microsoft doesn't know this; they are not dumb. They will try to do at least as much as they can get away with (and perhaps more, which we can then pounce on). Be sure you use the word "interoperability" more, now.

      My big fear is that this new protocol and server will be full of the kinds of bugs that Microsoft traditionally puts in new software expecting the public to help them debug it. Imagine the impact when people assume this DRM will protect their confidential documents (such as health records, bank records, and such), and stop using other methods. In a few years we'll see lots of these documents not only cracked, but cracked via the internet en masse. Oh the horror.

      --
      now we need to go OSS in diesel cars
    5. Re:Mostly FUD by mlrtime · · Score: 3, Insightful



      Isn't this exactly what Lotus Notes does with mobile users and its databases?

    6. Re:Mostly FUD by merlin_jim · · Score: 4, Informative

      It's perfectly reasonable for corporate customers to want to control access to their documents in the workplace, and that's what the Office 2003 DRM features are targeted towards. It's just a dumb client-server authentication scheme, people.

      I was there at TechEd 2003 when a VP of Verisign took the stage during the keynote address and announced these features.

      It is not dumb client-server authentication. It is a public key encryption package. You need access to a centralized server for typical key management operations, including looking up the public keys of parties with whom you have not communicated in the past.

      However you will certainly be able to access the documents in a disconnected fashion, as long as your local keystore contains the right information.

      Oh and at the time they also announced that the USPS would be supporting a stamping feature for this. Just like today, you can take a document and send it through the mail (to yourself) just to get it stamped with the current date. The USPS will digitally stamp the document with their current date/time. They didn't go into details on how this would work, but I imagine it's a typical hash/signature style function...

      --
      I am disrespectful to dirt! Can you see that I am serious?!
    7. Re:Mostly FUD by rking · · Score: 2, Insightful

      Wasn't all of this said before when Microsoft put the activation "features" into some of their software? That still seems to be around.

      Yes, but it did cause more problems than it solves, if only because it hasn't solve any problems at all. Everyone pirates the 'professional' versions that don't feature product activation.

    8. Re:Mostly FUD by weileong · · Score: 4, Interesting

      Do you think MS doesn't even use their own software? ...

      Personally, I see this being used in corporate law departments and in R&D divisions, where the ability to lock people out of something even if they do have possession of it would be invaluable.


      The next time MS gets sued, how many of the documents subpoenaed will (via DRM expiry etc.) be unobtainable by the other party?

    9. Re:Mostly FUD by Gaardenzwerch · · Score: 3, Insightful
      So the executive flying to L.A. won't be able to access the documents while on a 4-hour flight. Nor will he be able to do so from the hotel unless they open up the firewall to let him access the authentication server--something that seems inherently dangerous considering it's Microsoft we're talking about. Employees may not be able to work from home
      Anyone that is willing to accept this kind of annoyances must have very sensitive data.

      Now if I had any secrets to protect, I'd prefer encrypted files that are en/decrypted by a supplementary layer of my filesystem when I access them. I'd certainly not trust any security features from Redmond, as there will be cracks available before the first beta is out.

      On the other hand, if I were to try to steal data from a competitor, the perspective of being sued for DRM breach wouldn't turn me off when I'd want to expose myself to being busted for espionnage

    10. Re:Mostly FUD by drakaan · · Score: 4, Insightful
      Yeah, NTFS permissions are *really* handy...unless you mount an NTFS partition (read-only, of course) on Linux (or something else) and copy the files.

      We're talking about file security when the document specifically *can* be copied, and the only way to accomplish that is to use a proprietary (ugh), non-human-readable (ugh, at least to me for documents), application-bound, centrally-authenticated document management system. All of which sucks, IMHO.

      If it's supposed to be distributable and secret or subject to "rights" management then it probably shouldn't be in electronic format.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    11. Re:Mostly FUD by rifter · · Score: 4, Funny

      Yes, dumbass, and this isn't Palladium. Unless you see demons lurking in every conceivable manifestation of client-server computing, there's no problem here.

      Well, in the case of unix, daemons are generally lurking in most manifstations of client-server computing, and it is a good thing to kill as many of them as you can and ensure they are not resurrected by init. :)

    12. Re:Mostly FUD by pyros · · Score: 2, Interesting
      Just like today, you can take a document and send it through the mail (to yourself) just to get it stamped with the current date.


      If you're mentioning that in reference to such things as legally establishing a timeline (patent prior-art, copyright, etc), an IP lawyer once told me it doesn't work. It might if you have a tamper-proof envelope, but otherwise it won't hold up.

    13. Re:Mostly FUD by BJZQ8 · · Score: 2, Informative

      This would apply greatly to their most recent patent-infringement case where they "lost" 35 weeks of e-mail. Now, upon word from upper management, those 35 weeks of e-mail could be instantly, irrevocably, and easily evaporated. In fact, they could evaporate everything but sections that make them look good (i.e. the initial discussions with the company, not the later "Screw these guys, lets steal their stuff.") This is NOT a good thing, in my view.

    14. Re:Mostly FUD by BobTheLawyer · · Score: 4, Informative

      None - when you deliver documents etc subject to a subpoena you have to deliver the means of access to the document.

    15. Re:Mostly FUD by Anonymous Coward · · Score: 2, Informative

      I have been previewing a lot of the new features that will be introduced next week. (Don't ask - I may be violating the NDA)

      IF your company is running Server2003, and IF you use Office2003, etc. then the document can carry permissions that will for example allow you to read but not print or forward the document. It's the tight integration of Server2003, Office2003, ActiveDirectory, and the XP or 2000Pro OS that allows serious control by the document author within the company.

      THAT is the point - to sell the huge companies on using (buying into) the WHOLE enchillada from MS. The special features only work there.

    16. Re:Mostly FUD by GMFTatsujin · · Score: 5, Funny

      Employees may not be able to work from home or in the evening for the same reason

      You mean my evenings and weekends are ALL MINE AGAIN? Praise be to Microsoft! Where do I sign up?????

    17. Re:Mostly FUD by Stephen+Samuel · · Score: 2, Insightful
      Yes, and as such it seems entirely stupid. So the executive flying to L.A. won't be able to access the documents while on a 4-hour flight. Nor will he be able to do so from the hotel unless they open up the firewall to let him access the authenticatio

      I'm just waiting for the horror stories from the first MS customers who have their server crash, and then lose all access to critical documents. Even if they have backups, they'll still lose access to recently created documents that don't have their rights backed up. (talk about logic-bomb central!)

      Either that, or we'll end up finding out just how much of a sham MS's "protection" of those documents is.

      --
      Free Software: Like love, it grows best when given away.
    18. Re:Mostly FUD by BobTheLawyer · · Score: 4, Insightful

      it doesn't make hiding documents easier, it just provides an excuse for why they're not readable, and it's an excuse which isn't going to impress a court very much.

    19. Re:Mostly FUD by digital+photo · · Score: 2, Insightful

      It is arguable that being in a "business mode" is what will cause compatibility problems and reinforce the monopoly. Business mode is thinking that you need whatever it is that is compatible with everyone else. Since business mode implies that you "think smart" and try to antiipate what technologies will be used, you go with what's new and what looks good, from a business point of view.

      In the current climate of security sensitivity, not necessarily security awareness, business minded folk are going for what will "protect their IP".

      The herd will lumber towards "DRM" as a means of "potecting themselves" and get landlocked. Or in this case, locked in one application.

      This isn't new. MS has done this before with Word by repeatedly changing the format of the documents to make it as incompatible with other word processors as possible.

      It looks like they are going to try it again, just under a different guise, with a different business case.

    20. Re:Mostly FUD by Dr+Caleb · · Score: 2, Informative
      Isn't this exactly what Lotus Notes does with mobile users and its databases?

      Exactally. The server public keys are part of the User ID, along with an expiry date and the users keys. The server address book along with public keys are on the server. The user gets a local copy of the address book and keys if they wish, otherwise the keys can be compared when next they are on-line.

      --
      "History doesn't repeat itself, but it does rhyme." Mark Twain
  10. Netscape and legal precedent. by jamehec · · Score: 2, Interesting

    I'm no expert, but IIRC, didn't MS nailed for doing pretty much the same thing to Netscape some years ago?

    Correct me if I'm mistaken, but wouldn't that be some sort of precedent here?

    --
    This post made with the Dvorak layout.
    "Friends don't let friends use QWERTY"
  11. not by default... by ceswiedler · · Score: 5, Informative

    The article points out, and I agree, that it's unlikely DRM will be applied to documents by default, since implementing it requires configuring Windows Server 2003 and ensuring both the creator and reader of the document have access/accounts on the Rights server.

    It's really targeted at businesses which make heavy use of Active Directory already (or would switch to doing so), so that Finance people can restrict access to sensitive salary documents and such. Most people, even if they can apply DRM to a document, won't choose to do so. How many people change the rights for their local drives to remove access for 'Everyone'?

    1. Re:not by default... by gregmac · · Score: 2, Informative
      so that Finance people can restrict access to sensitive salary documents and such.

      Is saving sensitive documents in a directory that's read/write restricted to people in the Finance group not good enough? It seems to work just fine here.

      it requires configuring Windows Server 2003 and ensuring both the creator and reader of the document have access/accounts on the Rights server.

      So you have to upgrade to server 2003 to take advantage of this, and lock in further to one company. This sounds like a bad solution to a problem that's already been solved for years..

      --
      Speak before you think
    2. Re:not by default... by glesga_kiss · · Score: 2, Insightful
      Is saving sensitive documents in a directory that's read/write restricted to people in the Finance group not good enough? It seems to work just fine here.

      Depends on how good your staff/security is. A virus/exploit, reply-all cockup or a misplaced disk all blow directory access out of the water. A much better system would be who can open the doc in the first place.

    3. Re:not by default... by Qrlx · · Score: 3, Interesting

      Most people, even if they can apply DRM to a document, won't choose to do so. How many people change the rights for their local drives to remove access for 'Everyone'?

      Furthermore, what's the interplay between NTFS permissions, Share permissions, and these new DRM permissions? That's a lot of permissions to manage. Do I have to set these permissions from inside Word or can I do it in the Finder (Whoops. I mean Explorer. Man how'd that happen?)

      Every place I've been, the Finance people already have restricted access to sensitive documents. It's in a folder called "Finance" that only they have access to.

  12. Only when the document creator chooses to lock it. by pe1chl · · Score: 5, Insightful

    My impression from this document is that it is an optional feature, only active when the creator of the document specifies who can read it.
    When the creator thinks it should only be readable on Windows 2003, and not on other software, that is his responsibility. And it is the responsibility of the reader to reject such documents as unusable.

    This is hardly new. We use StarOffice 5.2 at work, and it cannot open password-protected documents from Office 95 or 2000. This is amongst the least problems when using that package in a mixed Office-StarOffice environment.

  13. Re:The straw that broke the PHB's back? by marktoml · · Score: 2, Insightful

    It may backfire by simply forcing companies not to want to upgrade or to delay upgrade decisions.

  14. That'll be true for a while. by Anonymous Coward · · Score: 5, Insightful

    If I receive documents from suppliers and clients that I can't read, then I will ask them to send it again in another format, and they won't have a problem with that for now.

    But five years from now, when everybody buying a Dell or Gateway machine has the latest version of Office bundled with their machine, I will likely be the only guy who can't read their documents, and their sympathy will have disappeared. I'll have to upgrade.

    There's no particularly good way out of this using the marketplace; the marketplace will dictate it.

    1. Re:That'll be true for a while. by banzai51 · · Score: 4, Interesting

      That's fine until a BIG customer like say, Ford or GM start using this stuff. Think they'll change or resend? Nope. They'll just cut your contract and give their business to someone who will listen to them. What Open Office needs is someone like Ford or GM to switch to it, and force a trickle down effect. So if your local 800lb gorilla switches, then look for most of the businesses in your area to switch.

    2. Re:That'll be true for a while. by JWW · · Score: 4, Insightful

      If they want to still be your supplier, they won't be able to dictate it, you can demand that they send you the documents in the appropirate format for you.

      I think we'll see more pdf's due to things like this.

      As for your clients, well, there you're screwed, they will demand the new formats, but you can always try to send them pdfs. But in the end you will have to do what they want.

      I keep finding more and more reasons to dislike Microsoft. I mean, how the hell are there people out on slashdot who can actually continue to stick up for them (M$ employees excluded).

    3. Re:That'll be true for a while. by El · · Score: 2, Interesting

      I already make a point of insisting that people who send me .DOC files resend them in a vendor-neutral format -- even though I am running windows!

      --

      "Freedom means freedom for everybody" -- Dick Cheney

    4. Re:That'll be true for a while. by PCM2 · · Score: 3, Interesting
      But five years from now, when everybody buying a Dell or Gateway machine has the latest version of Office bundled with their machine, I will likely be the only guy who can't read their documents
      Unlikely. Last I checked, having Office bundled on a new PC usually costs the consumer something like an extra $150-350, depending which version you want. Most new cheapie PCs from Dell and the like ship with MS Works. In fact, I believe the low-cost default for Dell notebooks is WordPerfect Office 11.

      I understand all the uproar, but I seriously think this isn't going to have as big an impact as people are predicting. As an editor, I have to send documents back and forth. Rights management doesn't mean squat to me; I have contracts to protect my rights. If an author sells something I own, he's out of work. If it's really serious, I sue him. I don't need to have any of that nonsense built into my word processor -- all I need to do is edit documents, and those documents will regularly trade hands between all sorts of people before I'm done.

      I imagine the real audience MS is targeting with the DRM stuff is the "enterprise" customer -- somebody with sensitive documents that are supposed to stay within the enterprise, and not get leaked out to other people. This is a specialized application with a specialized audience. If you want to use Microsoft Word to write documents that other people can read, you'll still be able to do that. Hell, if you're that worried, have Word save them as RTF.

      --
      Breakfast served all day!
    5. Re:That'll be true for a while. by in4mation · · Score: 4, Insightful

      A LOT MORE SPEED IS What Open Office needs... and then you will get wider adoption. I try to use Open Office but its a really painfull process and usaually end up using Word when I have some serious documents to bang out.

  15. I don't see the problem here. by AzrealAO · · Score: 5, Insightful

    This is a feature some people want. It'd not on by default (how could it, be, since it requires a properly configured server to do the rights management).

    It'll let businesses lock their documents down, for internal use. Nothing at all here gives any indication that all documents created will have DRM forced on. If a business or user doesn't want to use it, don't turn it on.

    1. Re:I don't see the problem here. by tambo · · Score: 3, Interesting

      No, it really won't.

      Think of the ways that you can defeat this scheme:

      * Print out the document and send it however you like.

      * Take screenshots and send the images as JPEGs.

      * Use the built-in fax modem to fax it somewhere.

      * Copy the text into the clipboard and paste it into another app.

      The exploits are endless. You'd have to cripple the entire operating system while the document is open.

      I needn't contemplate the absurdity of Microsoft trying to get into the information-security business. Obviously, that's not their goal. Even if it were, it will frequently be at odds with their function of providing a usable operating system.

      - David Stein

      --
      Computer over. Virus = very yes.
    2. Re:I don't see the problem here. by vondo · · Score: 3, Insightful
      In fact, this could be a great opportunity for OpenOffice or something like it. Imagine a suite that would lock documents such that they could only be decrypted by someone with the right certificate, but that it's done in an open fashion so any program could implement it. Plus, users would have the assurance that the security model is well audited (as opposed to MS Office which has used very weak encryption in the past.

      The point is, MS can do this, but a Free/Open project could do it better.

    3. Re:I don't see the problem here. by jmichaelg · · Score: 2, Insightful
      Is anyone thinking out there?

      Clearly you're not. The problem is clearly stated - any competitor that attempts to reverse engineer the format so that a user can edit their documents with another tool besides Word is SOL. Unless Msoft makes the code to edit the documents public, not bloody likely, then it's just another attempt to lock up the office market.

      Damn, I wish Jackson had kept his yap shut.

    4. Re:I don't see the problem here. by Richard_at_work · · Score: 3, Informative

      You'd have to cripple the entire operating system while the document is open

      Not really, the applications do most of the limiting, and since you HAVE to open the restricted document within a trusted application, it can stop you: printing, faxing, taking screen shots of that application (you can arrange the windows in such a way that a screen shot will miss that window altogether, its all there in the win32 api and probably moreso in the extensions office 2k3 gives), it can limit copy-and-paste.

      So the only real way you can defeat this is by opening it in a non trusted application, and you can bet yo0ur ass that its encrypted, tho how long that will remain unbreakable is another arguement entirely.

      So, in summary, you havent read the article and are jsut spouting off things you think you can do to get around stuff. (They clear up most of your arguements in the article).

    5. Re:I don't see the problem here. by Slacker · · Score: 2, Interesting

      Hmmmm...
      I wonder if this "feature request" was generated by the execs at Arthur Andersen or Enron???

      --
      ~~~ Trust me, I'm a professional! ~~~
    6. Re:I don't see the problem here. by jmv · · Score: 4, Insightful

      Is there a Win32 API call to prevent all cameras from working.

    7. Re:I don't see the problem here. by velkro · · Score: 5, Insightful

      So... you install Windows in VMWare, install DRMOffice, open document, and screen cap the VMWare session. Or use Terminal Services, rdesktop, vnc, insert_favourite_dmca_circumvention_tool_here...

    8. Re:I don't see the problem here. by Lodragandraoidh · · Score: 4, Insightful

      DRM must encrypt the data, which would make reading the document, even with a hex editor, a losing proposition.

      If we agree that it is encrypted, then reading M$ documents will require duplicating their domain authentication and encryption for DRM - not likely to be released by M$.

      Needless to say, someone will probably break it anyway. I have to laugh at some of these folks who are saying 'this is the solution to all of my document exposure problems'. DRM is not a panacea; your documents are only secure if you keep them off of electronic media, off of the net, and locked up in a vault. Once you send it off into the ether, all bets are off - DRM or no DRM.

      --

      Lodragan Draoidh
      The more you explain it, the more I don't understand it. - Mark Twain
    9. Re:I don't see the problem here. by Courageous · · Score: 5, Insightful

      So the only real way you can defeat this is by opening it in a non trusted application,...

      No, he's correct. You'd have to cripple the entire operating system while the document was open. For example, you'd have to ensure that VRAM was inaccessable to the users, that nothing was paged out, that the memory of the application itself never stored the document in unencrypted form (impossible, if it's displayed), and so forth.

      But in any case, nothing my digital camera can't defeat.

      C//

    10. Re:I don't see the problem here. by Trailer+Trash · · Score: 5, Funny

      You'd have to cripple the entire operating system while the document is open.

      Now that would be a tough one for Microsoft to pull off...

    11. Re:I don't see the problem here. by Luscious868 · · Score: 2, Interesting

      Some of you people never cease to amaze me with your anti-Microsoft FUD. I'm no Microsoft fan but some of your responses here are laughable. Look it's not going to come turned on by default and if you want to use the DRM you're going to need a server. The server requirement pretty much ensures that joe-six pack (who gets office bundled with his PC) is never going to use it. Offices where users take documents home to work on aren't going to use it.

      Sane IT professionals won't bother with it. I would never trust my information to a Microsoft DRM enabled format that requires an authentication server. Can you imagine what will happen when the inevitable bug / worm / virus totally screws up the server and causes all of the authentication information to be lost. Everyone in the office is locked out of their documents for a day while the authentication server is brought back up. Especially after the hassle that was Blaster and SoBig, the last thing a sane IT department would do is implement Microsoft DRM that requires an authentication server to be up and running to open documents.

      This is hardly a plot by Microsoft to lock users into the Office format. If DRM didn't require a server, was enabled by default and Clippy urged you to use it, then I'd be suspicious. As it stands now it appears to be a feature that was made to appeal to certain departments within large business and it will no doubt prove to be more trouble than it's worth.

    12. Re:I don't see the problem here. by blibbleblobble · · Score: 3, Interesting

      "You'd have to cripple the entire operating system while the document is open."

      Did you not read that part of the plan?

      http://www.epic.org/privacy/consumer/microsoft/pal ladium.html

    13. Re:I don't see the problem here. by weeboo0104 · · Score: 2, Funny

      You'd have to cripple the entire operating system while the document is open.

      Isn't crippling Windows redundant?

      --
      It is easier to build strong children than to repair broken men. -Frederick Douglass
    14. Re:I don't see the problem here. by tambo · · Score: 2, Insightful
      Great - so you can disable the feature that's not practical.

      So many of Microsoft's technologies fit that description:
      • System Restore
      • Indexing Service
      • Office Binder
      • Office Fast Find
      • !@#$ing office assistant (now assaulting you both in Office and in your Windows XP file searches!)
      • the much-vaunted voice-command feature in XP
      • the software firewall in XP
      • fixed-disk compression (does anyone use this?)
      • Office document properties
      • HTML content in Outlook (does this actually benefit anyone except spammers?)
      • Active Desktop (a/k/a "the ability to animate your desktop"... ugh, just what I need)

      You know, it's a miracle that Microsoft sells any software at all, when 80% of its features turn out to be nonfunctional or pointless. If they dumped all of their resources into just increasing stability and security, and implementing a few features that users actually request, their business would skyrocket.

      - David Stein
      --
      Computer over. Virus = very yes.
    15. Re:I don't see the problem here. by tambo · · Score: 3, Insightful

      This is going to happen, too many people at the selling end like it.

      To a limited extent, I agree with you.

      In general, corporate secrecy is a good thing - companies aren't going to invest billions in R&D unless they know that they can protect their trade secrets. It's not a good thing when it comes to protecting fraud or spoliating evidence, but that's different.

      So, I'm also in favor of allowing companies to secure their electronic documents - just as they lock up their paper documents and are careful about giving out the keys.

      But in a technical sense, the mechanisms of doing this should be in the file store, not in the application. Either someone can access the information, or they can't.

      Enforcing security on a per-application basis is needlessly complex, and as a result, is hopelessly, hopelessly error-prone. Meanwhile, it imposes grievous inconveniences on the users. And (not coincidentally), it breaks all of the old hardware and software with which the files were used, requiring everyone to upgrade everything. That is a terrific waste of resources.

      - David Stein

      --
      Computer over. Virus = very yes.
    16. Re:I don't see the problem here. by 511pf · · Score: 2, Interesting

      Heh. Microsoft owns Virtual PC now. The last Microsoft operating system VMWare will be able to support is Windows 2003 Server.

    17. Re:I don't see the problem here. by Viol8 · · Score: 2, Insightful

      If VMware implement a perfect virtual PC then there simply is no way for an OS running within this VM to know if its real or not.
      There simply is NO WAY for MS to prevent Windows running in a properly written virtual PC. Sure the could check the type of virtual drivers
      loaded but then it would be a simply task for VMWare (or whoever) to modify them so the check doesn't work.

  16. Re:The straw that broke the PHB's back? by albalbo · · Score: 2, Funny

    Pretty Hot Babe.



    It's a cute name for your manager.

    --
    "Elmo knows where you live!" - The Simpsons
  17. wait a minute... by prichardson · · Score: 4, Interesting

    Does this not violate Microsoft's DoJ agreement? I mean, this is obviously anticompetitive behavior. I think that people will see this new "feature" and either not upgrade (unless it adds A LOT of worthwhile features) or save their files as RTFs or older doc formats. I think Microsoft is shooting themselves in the foot with this. People want compatibility, that's why they stick with Windows. People will reject this.

    --
    Help I'm a rock.
    1. Re:wait a minute... by Richard_at_work · · Score: 2, Informative

      No they wont reject this. Its an optional thing when saving documents. Customers requested this feature, so my guess is at least some people will buy into this. And as for the DoJ, they can go play with them selves if they think this violates anything, it doesnt as its not anticompetative, just another feature that OOo can think about implementing in their own way.

  18. Re:The straw that broke the PHB's back? by GrenDel+Fuego · · Score: 5, Informative

    Pointy-Haired Boss. it's a dilbert reference.

  19. Why upgrade? by gregmac · · Score: 2
    This is likely a very bad move on MS's behalf - most companies will probably not want to upgrade, knowing that it will break their compatibility with others. Unless it offers some real compelling reasons to upgrade, will people even bother?

    Even the dumbest PHB's have a no-brainer here: spend lots of money upgrading, and lose the ability to exchange documents to/from many other companies, or save the money, continue being able to use whatever they currently have, and continue being able to communicate with other companies.

    --
    Speak before you think
    1. Re:Why upgrade? by JohnFluxx · · Score: 2, Insightful

      it might backfire. I don't know how it works, but if you encrypt it, it might also be counted as a signing it.

      So you whip out your digitial camera, takes pictures of the document, save the document to a floppy, and show the photo's to the judge. They order for the password to be given to view the document (or whatever) and because it is signed, it is proof that it did come from the accused and it unaltered.

  20. MS strategy by NetMagi · · Score: 3, Insightful

    Another thing to think about is this: Notice MS hasn't been soo forthcoming lately about linux as a competitor. I think maybe their "near silence" means they are actually getting worried.

    In adding this to office, they are really going to separate the market. I bet they figure, if they do this, whoever jumps on board will likely STAY on board due to the fact that switchig to open-source in the future after you've already got a bulk of documents done in this "new office" will be MUCH harder.

    I think they just drew a line in the sand. . and they figure they are KEEPING whoever doesn't cross now

  21. RTFA by Lane.exe · · Score: 5, Informative
    From the first paragraph:

    for the first time will include tools for restricting access to documents created with the software. Office workers can specify who can read or alter a spreadsheet, block it from copying or printing, and set an expiration date.

    Users get to set it. It's not automatic.

    --
    IAALS.
    1. Re:RTFA by david_reese · · Score: 3, Insightful
      From the first paragraph:

      for the first time will include tools for restricting access to documents created with the software. Office workers can specify who can read or alter a spreadsheet, block it from copying or printing, and set an expiration date.

      Users get to set it. It's not automatic.

      For now... but they can always change that. Who's to say that our helpful friends in Redmond won't "default" this behavior in newer versions, after it's been pseudo-released in this version? It's not like they don't have a history of doing this same sort of behavior (see DOJ vs. Microsoft).

  22. Re:The straw that broke the PHB's back? by Brendan+Byrd · · Score: 2, Funny

    Point-Haired Boss. For reference, see Dilbert's comics.

  23. This is news? by AnotherSteve · · Score: 4, Insightful

    New version of [Software] has [feature1..featureN] that will make it incompatible with previous versions. Observers say that [Company] hopes this will drive sales of [Software].

    Whatever.

    --
    Information wants to be $1.98/lb.
  24. "Problem?" by schon · · Score: 5, Funny

    coerce those running older versions of Office to upgrade, which has been a problem for MS in the last few years

    Yeah, it's so damn irritating when your customers pay you for something, and then expect to continue using it.

  25. It's Optional by athakur999 · · Score: 2, Insightful

    The DRM features will be optional, if you don't want to use them then don't use them. Presumably, if you save a file without DRM it'll save it as a regular .DOC file.

    --
    "People that quote themselves in their signatures bother me" - athakur999
  26. Re:The straw that broke the PHB's back? by UberOogie · · Score: 5, Insightful

    Dream on.

    Call me a cynic, but I've lost count of the number of times that MS forced upgrade cycles were going to be the end of the company. It hasn't yet, and won't be in the future, even with this. Enough people and companies will pay to make it a non-issue. Watch.

    --
    "Enough of this wretched, whining monkey life." -- Marcus Aurelius, _Meditations_, Book 9, 37
  27. Before everyone gets totally bent... by tgd · · Score: 3, Insightful

    Where does it say *all* docs will be protected?

    If its just docs you choose to use DRM with, then whats the problem? You choose to do that knowing the limitations because it makes sense for your use case. If thats a problem, you don't use it.

    If I, as a company, choose to require all outgoing docs to have DRM, its my need to protect my information thats locking people in, not Microsoft.

    And for what its worth, I don't use a speck of Microsoft software outside of work, and wouldn't. But lets get real here.

  28. It's actually important to do this. by tjstork · · Score: 5, Insightful


    Law firms, especially, need this feature.

    Right now they have to assume that a word document is unaltered upon receipt from a client. Now, with DRM, they can guarantee it. They also need to control distribution of documents and readability.

    Pretty much every major corporation will want this feature once they understand it.

    So, instead of fighting DRM, jump on the bandwagon, and have --better-- rights management in Open Office.

    I'm not actually convinced that you need to have compatability between Office suites. Really, most people can use their existing MS Office to edit their Office documents and their new Office to edit their new documents. That way, if the old Office license is expired by Microsoft, everyone can complain to MS about how they can no longer read their documents, whereas, Open Office would theoretically never have that problem.

    So, I would educate customers that file compatibility is not particularly necessary.

    --
    This is my sig.
    1. Re:It's actually important to do this. by JediTrainer · · Score: 5, Insightful

      Right now they have to assume that a word document is unaltered upon receipt from a client.

      I don't know about your area, but I think that a number of the bigger law firms around here (such as Torys) has all their documents stored in PDF format. If they need to prevent changes, it's a simple matter to sign the document before sending it anywhere.

      --

      You can accomplish anything you set your mind to. The impossible just takes a little longer.
    2. Re:It's actually important to do this. by Lumpy · · Score: 3, Informative

      Right now they have to assume that a word document is unaltered upon receipt from a client.

      if your law firm does this, you need to switch to a competent law firm right away.

      Rule #1 in business and in law, NEVER EVER Trust anyone.

      #2 is Double check everything.

      Here, send me my recent bill in word format for me to review before you send it to me, no, I won't modify it.

      --
      Do not look at laser with remaining good eye.
    3. Re:It's actually important to do this. by oGMo · · Score: 4, Insightful
      Law firms, especially, need this feature.

      Right now they have to assume that a word document is unaltered upon receipt from a client. Now, with DRM, they can guarantee it. They also need to control distribution of documents and readability.

      Don't be silly. This can easily be done already. PGP sign and/or encrypt your documents, and your clients can verify they get there intact, and only authorized recipients can read them.

      Or did you want your clients not changing them? Wait, same deal applies. You've got the original signature, anyone who gets the document can verify it's in its original state.

      Hint: when you give the data to someone, you can't restrict what they do with it. I don't mean it in terms of a rights, just simple physics. Grandiose complex schemes like this one are easy targets; if you rely on them, when they break, you're in trouble. Litigation won't make secrets secret again, or undo damages.

      --

      Don't think of it as a flame---it's more like an argument that does 3d6 fire damage

  29. Re:The straw that broke the PHB's back? by override11 · · Score: 5, Interesting

    We allready use OpenOffice for all our end user's here. Just be sure the Pc has 128 megs of ram, and put the office quicklaunch on startup, or they will complain about how long it takes to start. Otherwise, it works awesome for all standard end user word / excel tasks (99% of end users). As soon as your company gets one of those audit letters, spring the OpenSource and the management will come flocking. =)

    --
    No I didnt spell check this post...
  30. Circumvention allowed for interoperability by mpoulton · · Score: 5, Interesting

    IIRC, the DMCA specifically permits circumvention of copy protection/DRM/anything else if it is done specifically for purposes of interoperability (not just to allow unauthorized access to information). That means that OpenOffice or any other competitor would be allowed to crack their encryption in order to allow their users to read .doc files. Right?

    --
    I am a geek attorney, but not your geek attorney unless you've already retained me. This is not legal advice.
    1. Re:Circumvention allowed for interoperability by Theatetus · · Score: 2, Informative

      No. Specifically not, in fact. What would be legal would be for the OOo team to crack the encryption in order to build a DRM client that was compatible with the Microsoft DRM server (or, for that matter, a server compatible with the MS DRM client).

      --
      All's true that is mistrusted
  31. OpenOffice is well developed already by BillsPetMonkey · · Score: 2

    It's just that OpenOffice's marketing is rubbish - it has to rely on IT-savvy word-of-mouth because they don't have the advertising budget Microsoft has.

    Gaaah! It shouldn't be difficult to sell a prduct that outputs not only to standards-compliant HTML as an inbuilt function, but also exports to PDF! It's an IT Directors wet dream! The only thing stopping it is that Microsoft tech-monkeys don't know and don't want it.

    --
    "It's not your information. It's information about you" - John Ford, Vice President, Equifax
  32. Calculated Risk by SteveX · · Score: 3, Insightful

    Of course it's a calculated risk.. Some people will hate the DRM, but a lot of companies will really like it. Being able to say that a document can only be opened by managers in your company, for example, is worth lots of PHB points.

  33. Re:The straw that broke the PHB's back? by vrt3 · · Score: 3, Informative
    --
    This sig under construction. Please check back later.
  34. Very stupid by JediTrainer · · Score: 4, Insightful

    The server software will record permission rules set by the document creator, such as other people authorized to view the document and expiration dates for any permissions. When another person receives that document, they briefly log in to the Windows Rights Management server--over the Internet or a corporate network--to validate the permissions.

    I read this as follows:

    You cannot read a document when not connected to the internet. If, by some chance, a DDOS attack is launched against a company's 'Rights Management Server' (which MUST be exposed to the 'net), or it is otherwise hacked into and shut down, then ALL of the documents with this 'feature' in them will cease to function.

    Pardon me, but it is utterly stupid to rely on a single server/service to remain running just so I can read something. A DDOS attack can literally shut down a company at this point.

    --

    You can accomplish anything you set your mind to. The impossible just takes a little longer.
    1. Re:Very stupid by menasius · · Score: 4, Funny

      Ah but you are naturally forgetting that Microsoft puts out tightly secure software, with no holes for a worm or virus to get in. Naturally, the server will be secure as there is a proven track record of Microsoft's superior securi... no, wait that's not right at all.

      It would have been satire but I couldn't keep up the facade.

      -bort

    2. Re:Very stupid by Richard_at_work · · Score: 2, Insightful

      Ever heard of VPNs? Bingo. And where does it say that this is a single server, my understanding from other sources is that it can be clustered or distributed over several locations.

  35. Re:The straw that broke the PHB's back? by bokelley · · Score: 5, Insightful

    At the same time, Microsoft has been fairly savvy in protecting its {monopoly|competitive advantage} without really ticking off the media. The Messenger lockdown is pretty blatant, and I haven't seen much public outrage - primarily because the people using Trillian et al are not the mainstream (yet). The big companies that are locked into their Microsoft investments make choices every 2-5 years when they upgrade their desktops. If Microsoft can create FUD - by claiming incompatibility or building it into new products - then they can hold off OpenOffice for another few years. I wonder if the EU would see this as anti-competitive (the US won't/can't do anything even if it does).

    --
    warning: epoll_wait is not implemented and will always fail
  36. Depends, I guess by WCMI92 · · Score: 2, Interesting

    Open Office can't clone this format, because the weak "interoperability" clause of the DMCA has basically been stricken from the law by former Time-Warner lawyer Judge Kaplan (of deCSS fame).

    But then, WHY would they want to?

    Why would I want to send .docs to people who can't read them? Why would I want to rely on MS's legendary security (think ass rape) when it'd be far better to encrypt the disk I store sensitive files on?

    I see MS's new office as a boon to government and corporate types who break the law. Now, whistleblowers will have a hard time getting out information about wrongdoing. If they do, they can be tracked, and sued for violating the DMCA!

    --
    Corporatism != Free Market
  37. Re:The straw that broke the PHB's back? by BWJones · · Score: 4, Interesting

    I wonder what this will do for companies such as Apple who are building in MS office document readability/writeability into their applications/operating systems? Right now I can read and write .ppt files in Keynote, and .doc files with, ahem other bits of software on my OS X boxes. So, is this simply an attempt at providing a more secure environment or is Microsoft doing an end run around other folks to make it a federal crime in the name of security to compete with them?

    --
    Visit Jonesblog and say hello.
  38. DMCA Violation - Not in my NSHO. by the-banker · · Score: 2, Insightful

    Basically, the copyright holder of the document that is digitally encrypted is the person and/or company that is responsible for it being authored.

    Since the DMCA forbids circumventing a device to protect copyright, it is irrelevant since the person doing the circumventing is:

    1. Opening their own document, and as the copyright holder they can't very well be infringing upon themselves (though if this were possible no doubt the RIAA would find a way, but that is another topic).

    2. Opening a document gievn to them by the copyright holder, in which they have been granted express use of the document.

    Even larger than this, however, is the fact that the copyright holder DID NOT implement the DRM technology. A third party cannot unilaterally implement DRM technology on behalf of copyright holders to protected works that do not even exist yet.

    I guess what I am saying is that MS (holder of the DRM device) cannot sue PersonX because they do not own the copyright to the protected work.

    All this being said - did Judge Jackson have incredible foresight into the possible transgressions of a Microsoft monopoly, or are we really dealing with yet another Bush Administration pandering to large corporations? Each time I read something like this I wonder how our political representatives can be so blind to the societal harm of a software monopoly.

    1. Re:DMCA Violation - Not in my NSHO. by Zork+the+Almighty · · Score: 2, Interesting

      1. Opening their own document, and as the copyright holder they can't very well be infringing upon themselves (though if this were possible no doubt the RIAA would find a way, but that is another topic).

      Circumvention is illegal, regardless of who owns the copyright, or if there even is a copyright (ie : an encrypted public domain work).

      2. Opening a document gievn to them by the copyright holder, in which they have been granted express use of the document.

      We buy DVDs under a licence to view them. That would seem to imply that the copyright holder has granted us permission to view them. Yet decrypting DVDs, regardless of the motive, seems to be illegal.

      --

      In Soviet America the banks rob you!
    2. Re:DMCA Violation - Not in my NSHO. by the-banker · · Score: 2, Informative

      Actually you need to continue reading Section 1201 of the DMCA:

      `(A) to `circumvent a technological measure' means to descramble a scrambled work, to decrypt an encrypted work, or otherwise to avoid, bypass, remove, deactivate, or impair a technological measure, without the authority of the copyright owner; and

      `(B) a technological measure `effectively controls access to a work' if the measure, in the ordinary course of its operation, requires the application of information, or a process or a treatment, with the authority of the copyright owner, to gain access to the work.

      As is clear, the DMCA ONLY applies when the copyright holder does not give authority to circumvent the technological measure.

      My point is that the copyright holder is not Microsoft, so they cannot enforce this provision. If I write a document in Office 2003 and encrypt it, then choose to decrypt it myself, I am essentially granting myself authorization, since I am the copyright holder. MS can not sue, as the Slashdot post alludes, under the DMCA, since they are not the copyright holder. The DMCA's scope is limited to breeches against the copyright holder.

  39. Most (99%?) people, regrettably, won't care... by JessLeah · · Score: 4, Interesting

    ...or even know about this.

    Us here at SlashDot tend to take a dim view of Microsoft (even though many of us like some of their products-- I myself like their mice, and MS Word is nice), but most people don't even realize there's a choice.

    I apply for Unix Systems Administrator positions sometimes, and virtually ALWAYS I get asked for my resume in... MS Word format.

    Giving them a PDF isn't good enough. They just ask you for the Word version again as if you'd said nothing.

    I'm starting to think that MS's slogan should be "But EVERYONE uses Microsoft!", since that seems to be the way most end-users seem to think (without even realizing it). Or, of course, it could just be "Microsoft: You WILL use our software, whether you want to or not...")

    This sort of thing is getting really tiresome. When will MS finally get the Grand Cosmic Smackdown for doing this sort of thing? How long can an ill-gotten monopoly last? (And why do so many SlashDotters seem to like defending MS?)

  40. Time to eliminate the M$ Office cruft by SunPin · · Score: 2, Interesting

    This could be a good thing. Enough people have heard of "open source alternatives" that they will start to seriously examine what that phrase means.

    There is nothing in this article that talks about benefits to consumers. With what /bots know about the average user, it's an indisputable fact that people don't give a flying fsck about document security. Those that do already know how to protect themselves.

    When a M$ clone decides to say, "When we asked consumers about...", you can be certain that they didn't ask consumers anything. Consumers want document compatibility. There is nothing Office does for the average user that OpenOffice can't do.

    Except take money. It's high time to start preaching this to ordinary users.

    --
    Laws are for people with no friends.
  41. Three letters: P. D. F. by fz00 · · Score: 3, Insightful

    MicroSoft is in my opinion doing a wrong thing by making their documents unsharable. WordPerfect documents can be shared almost seamlessly from versions 6 thru 11. Forcing everyone to upgrade to share documents is expensive and impractical. People should start encouring exporting to PDF to make their documents sharable and hopefully Adobe won't do something as stupid as this.

  42. Office 2003 DRM: It's Very Cool and Not Insidious by bimmergeek · · Score: 5, Interesting

    As often happens, people have reacted to a Microsoft article without understanding the real issue.

    There have been many times when I have wanted to keep an email or a document out of the hands of other people. I once got in trouble for sending an email joke to people whom I knew would enjoy the humor. Alas, they forwarded the email to others who forwarded it to others... and so on... so that eventually it ended up in the hands of someone who took the value on "diversity" a bit too far and were offended.

    The DRM feature in Office and Outlook enables a user to prevent emails and documents from being forwarded to and viewed by people not specified by the sender/creator. That's all this feature is. The sender/creator certainly has the option of not embedding DRM into the email or document so that there is no rights management involved.

    This feature is one I have wanted for many, many years. I want to control who has access without having to expose the recipient to the mystery and overhead of encryption.

    --
    -Everyone laughs at lemmings but no one ever wants to admit to ever being one.
  43. Luddite power! by snooo53 · · Score: 2, Funny
    I am! Just the other day I found a perfectly working Smith Corona in the dumpster. It's awesome! I can't imagine why anyone would throw it out.

    It's even got a 1 line digital display on it; makes me want to figure out how to mod it to use that digital signal as an input for my computer. Imagine having a Typewriter in front of your computer! Okay well maybe that sort of defeats the purpose of having a typewriter in the first place...

    --
    The sending of this message pretty much inconveniences everyone involved.
  44. An end to Whistleblowers... by cnelzie · · Score: 5, Interesting

    ...unlike in the previous years where a lowly secretary could get her hands on an executive document detailing such things as fleecing the investors, dumping (on accident or on purpose) HIGHLY toxic chemicals into the local residential area's water supply or other scandalous corporate activities will simply cease to be.

    Unless the rights to print such a document are still allowed, it would mean that corporations can get away with hundreds upon hundreds of scams, illegal activites and everything else that our nation's current corporate climate has bred.

    Now, if we had a culture of doing the right thing, being honest and trusting, then there would be no issue with having such DRM capabilities being built into an office software package... Of course, that kind of feature would never be used in such a world as there wouldn't be any reaon, if people could be trusted.

    I know that DRM makes sense on protecting a company's assets, but it can be the carte blanche to the CEO's of the world to forgo legal business practices...

    --
    If you ignore the other uses of a tool, does that make the tool less useful, or you less useful?
    1. Re:An end to Whistleblowers... by Schnapple · · Score: 4, Interesting
      Now, if we had a culture of doing the right thing, being honest and trusting, then there would be no issue with having such DRM capabilities being built into an office software package... Of course, that kind of feature would never be used in such a world as there wouldn't be any reaon, if people could be trusted.
      So you're saying because a handful of companies are doing bad things and snooping secrataries break the rules and could save the day we shouldn't implement this feature? There's tons of perfectly legitimate uses for this technology and anyone who doesn't like it can go use OO or just ignore the feature.

      Besides, Kenneth Lay didn't have a clue what was going on in Enron (or so his PR firm says) - what makes you think he'd be smart enough to use this feature?

    2. Re:An end to Whistleblowers... by j-turkey · · Score: 4, Insightful
      Now, if we had a culture of doing the right thing, being honest and trusting, then there would be no issue with having such DRM capabilities being built into an office software package... Of course, that kind of feature would never be used in such a world as there wouldn't be any reaon, if people could be trusted.

      So you're anti-DRM...but what you wrote seems anti-crypto too. Is crypto OK to use just so long as "evil corporations" stay away from it? Crypto is for everyone...plain-old-folks-like-you-and-me, scientists, inventors, admin assistants, doctors, lawyers, salesfolk, plumbers, students, and yes -- corporate officers. Did you have the same reaction when PGP or GPG was released? It isn't like this is the first crypto to come to the Windows world. "Bad people" could've had their hands on it before just now. If this comes down to your not liking MS' implementation of it, don't use it. Otherwise, everyone who has ever written an encryption scheme for general consumption has had to think about the repercussions of "bad people" using it...and again, it's not like it wasn't available before (and it's been done quite well -- so well, that I do not believe that the NSA is able to break much of it).

      In your rationale for keeping DRM away from businesses you point to their general dishonesty. It seems like you're suggesting that every officer at every company is corrupt...and I don't think that you could be any more wrong. Come on...is everyone who tries to sell a product or service (and make a buck in the long run) an evil empire run by an evil genius?

      Sorry to vent this off onto you, but I'm getting kinda tired of the contention that every businessperson (and everything associated with it) being "evil". So some guys were (and are) dirty. Some psychiatrists take advantage of their patients to extort money and sex from them. Are they bastards? Sure -- but it does not say a single thing about the lot of them. How many executive officers do you know? How many of these people that you know (not know of, but actually know) are "evil corporate bastards"? Can you actually prove it?

      I'm not asking you to go back to work and hug your CFO, but just think about what you're saying.

      IANAEO
      I Am Not An Executive Officer (or even close!)
      I do use, and encourage the use of strong encryption for everyone.

      -Turkey


      P.S. Wouldn't this be alot easier if strong encryption just didn't work when the evil bit's set?
      --

      -Turkey

    3. Re:An end to Whistleblowers... by Bas_Wijnen · · Score: 2, Insightful

      There's tons of perfectly legitimate uses for this technology

      Any legitimate use it implements is also in GPG, which doesn't have the problem that it provides better possibilities for doing illegal things.

      anyone who doesn't like it can go use OO or just ignore the feature.

      Wrong. I don't like it, my boss sends me a protected document anyway. Should I just ignore that document?

    4. Re:An end to Whistleblowers... by NickFortune · · Score: 2, Insightful
      So you're saying because a handful of companies are doing bad things and snooping secrataries break the rules and could save the day we shouldn't implement this feature? There's tons of perfectly legitimate uses for this technology and anyone who doesn't like it can go use OO or just ignore the feature.
      I think the point is more that the rules of evidence seem to be somewhat lacking in the face of such a syatem. Granted, once an investigation is underway a court can order a company to produce all releveant docuemnts. The trouble is that some evidence is gnerally needed before an official investigation may be begun. Generally this means written evidence, which may be hard to come by if all relevant docs are automatically encrypted.

      So it's not about whether "we" should or should implement this feature - its about how it will be used and what mechanisms will need to be defined to provide a check for possible corporate malfeasance. Lord knows its hard enough to pin anything on a big corp as it is, even if, like Enron, they've been caught red handed. It's a little scary to think of how much harder it might become under such a scenario, and personally, I'd just as seen someone was thinking about the issue before the first case comes to trial. Someone who isn't a corporate lawyer in charge of cover-ups, that is.

      Besides, Kenneth Lay didn't have a clue what was going on in Enron (or so his PR firm says) - what makes you think he'd be smart enough to use this feature?
      Because a lot of people don't believe he's being entirely honest when he says that. And we think if he's smart enough to use a shredder, he's probably smart enough to use the encryption feature. I mean if there's one thing MS do well it's idiot-friendly interfaces... It'll probably ship on-by-default. In fact, if the intention is to break backwards compatibilty (again!) and force upgrades then it'll probably be not only on but mandatory.
      --
      Don't let THEM immanentize the Eschaton!
  45. Re:I for one... by jridley · · Score: 2, Interesting

    Either that or forbid upgrading. This could have the opposite effect that MS is hoping for. Some companies may instate a rule requiring the use of Office NO NEWER than Office XP or something.

    Our company did something similar for a while. We were developing with Visual Studio 4.2 because 5.0 sucked rocks, and we couldn't buy 4.2 anymore, so we bought copies of 5.0 for new people and installed 4.2, leaving the 5.0's unopened on the shelf.

  46. Just a little FUD by YrWrstNtmr · · Score: 2, Insightful

    Even if the developers of a competing office suite could figure out how to get their software to open an Office 2003 document, doing so would be a DMCA violation, since they'd be bypassing an anti-circumvention device.

    Hold on a bit. Does this article say that any and every Office2003 doc can only be opened on a system connected to a Win Server2003 LAN?

    No, it doesn't.

    Only those docs which the auther wants locked down, for their own personal reasons.
    "But rights-protected documents created in Office 2003 can be manipulated only in Office 2003."

    Similarly, if a document (any doc, from any program) is encrypted, breaking that encryption would presumably be a 'violation' of the DMCA.

    Let's not jump to conclusions here.
    (But of course, actually reading the article is a bit beyond /. sensibilities)

  47. DRM will be the exception, not the default by signe · · Score: 4, Interesting


    If you read the article (which it seems the submitter didn't even do), you'll see that Microsoft says that applying DRM to a file will be an exception, not the default behavior. This means that the OpenOffice team will be able to figure out the Office 2003 file formats without DRM features, and open and manipulate those files just fine.

    The only files that they won't be able to work with will be files that someone has chosen to apply DRM to. And from the document creator's point of view, this is a good thing. The ability to open the file in another app that was not beholden to Microsoft's DRM server would render the DRM completely useless. And DRM itself is not a bad thing. If you think so, perhaps you should execute "chmod -R 777 /" as root as quickly as possible.

    The first interesting thing will be to see where MS goes from here. Will Office 2004 have DRM as a default? If so, that would make interoperability a great deal more difficult. But more interesting is how the open source community will respond. DRM on documents is an important feature. If I'm putting out a document, it might be useful for me to be able to specify who can view it, who can edit it, and so on, without having to resort to filesystem ACLs. Sure, it's not absolute security on the document, but it's another layer. So it might be a good thing to consider to have some sort of open source DRM alternative for OpenOffice.

    -Todd

    --
    "The details of my life are quite inconsequential..."
    1. Re:DRM will be the exception, not the default by zarniwhoop · · Score: 5, Funny

      I tried your bloody chmod and this is what i got...

      C:\>chmod -R 777 /
      'chmod' is not recognized as an internal or external command, operable program or batch file.

      C:\>

      be a bit more helpful next time.

  48. Would it really be a DMCA violation? by crankyspice · · Score: 3, Interesting

    Remember, the DMCA (17 USC 1201(a), in this case) only concerns itself with works protected under the copyright act... We got into this discussion the other night in class, when someone suggested that they could simply encrypt an uncopyrightable simple compilation of facts and thus protect it under the DMCA. No; if the data itself isn't copyright(able|ed), simply adding encryption doesn't make it a DMCA violation.

    The issue, obviously, becomes thornier when you distribute software (OpenOffice) that can circumvent... But again, the DMCA might not apply here either. It's at least arguable, if the ability to open DRM-protected documents is only incidental; see 17 USC 1201(a)(2).

    Finally, I seriously doubt Office 2003 will save documents protected with DRM by default, given the overhead (an available Windows 2003 server to authenticate/authorize) required. Never mind interoperability and backwards compatibility; you couldn't work on such a document on your laptop on a plane, or anywhere you didn't have connectivity and VPN access... No way would the business community put up with that sort of crippling as SOP, even if they wanted to turn it 'on' for certain documents.

    --
    geek. lawyer.
  49. Business Orientated Positive Feature by Richard_at_work · · Score: 5, Interesting
    Im sorry but i do not agree that this is a negative feature for businesses. The DRM in this version of Office (called Information Rights Management) gives network administrators the ability to not only restrict access to documents, but also restrict what can be done with those documents. This is the holy grail that many companies have been looking for!

    Yes there is always the arguement that DRM will never stop an employee jotting stuff down from screen to paper and walking with that info, but there is a hell of a better chance someone is going to spot him copying 400+ pages of information, whereas with no DRM he could jsut copy the document and walk.

    It says in the article that this was a feature that customers had requested, and I for one can fully beleive that. Expire documents when they become dangerously out of date? Fantastic (think of health and safety!). Dont want an accountant to walk with sensative finacial information they get emailled? Dont let them print the document or do anything other than view it.

    Employers need to trust employees, certainly, but that trust also needs to be earnt. And yes you can emulate a lot of DRM with other means (no printer) but then that restricts peripheral things as well.

    Even if the developers of a competing office suite could figure out how to get their software to open an Office 2003 document, doing so would be a DMCA violation, since they'd be bypassing an anti-circumvention device

    This isnt MSs fault, this is the fault of a dumb law, and thats it. Want to blame someone for that? Blame the people who let it get voted in - the US populas.

    It has been said before that MS Office has not had any real good features since office 97, and that this is a feature that will force people to upgrade. My view is that yes a lot of people will upgrade because of this, but not forcable. They will upgrade because tehy WANT these IRM features, as it gives them more control.

    The last paragraph in the article states: ""It's not going to be adopted en masse, but I think they'll have a good rollout department by department for people dealing with more sensitive documents." and this is precisely what the office 2003 release is aimed at, the people who requested the features and who want them. If OOo had this feature before MS Office, I bet you could have enticed quite a few businesses over from the Office series jsut based on IRM.

    1. Re:Business Orientated Positive Feature by dzym · · Score: 2, Insightful
      If OOo had this feature before MS Office, I bet you could have enticed quite a few businesses over from the Office series jsut based on IRM.
      Except open source is generally stuck into a copy-what-MS-has mode, because MS is one of the biggest R&D spenders in the industry. Generally, that does mean MS is at the forefront making the innovations.
  50. Ah-ha! Not so fast... by jvmatthe · · Score: 5, Interesting
    Leach said Microsoft will provide a free plug-in for its Internet Explorer Web browser that will let it display rights-protected Office documents.
    That's it! As sure as the sun rises there will be an IE exploit that will allow arbitrary elevation of privileges to view even the highest security documents. Now, just incorporate that into OpenOffice somehow and you're done!

    (Yes, I know it's silly, but anyway.)

  51. Disgruntled employees by Petronius · · Score: 4, Insightful

    for the first time will include tools for restricting access to documents created with the software. Office workers can specify who can read or alter a spreadsheet, block it from copying or printing, and set an expiration date.

    this will be great when someone quietly locks 10 years worth of documents he created before getting laid off... a week later, after his Win* user ID has been deleted, his boss will loooooove the new DRM features implemented by Microsoft.

    --
    there's no place like ~
    1. Re:Disgruntled employees by doorbot.com · · Score: 3, Informative

      this will be great when someone quietly locks 10 years worth of documents he created before getting laid off... a week later, after his Win* user ID has been deleted, his boss will loooooove the new DRM features implemented by Microsoft.

      Window's EFS has a recovery key so an "administrator" can recover the files. In a simple networked environment, this would typically be the domain Administrator, or anyone else the admins designate. These users can unencrypt (and thus read/recover) a deleted user's files. I would guess that IRM-protected files would be recoverable through a similar method.

  52. This lock won't keep anyone out by unfortunateson · · Score: 2, Interesting
    From the article:
    Leach said Microsoft will provide a free plug-in for its Internet Explorer Web browser that will let it display rights-protected Office documents.
    And from there, the DOM should let you get at all the content.
    --
    Design for Use, not Construction!
  53. DRM for business documents is a valuable tool by maynard · · Score: 5, Insightful

    A few facts and then an opinion:

    1) DRM technology will be available to businesses which choose to run a DRM server on Windows 2003. It will not be enabled by default.

    2) The technology will allow a management (or really the top level key holders) to limit document access rights to specific individuals or a group within the organization. A very valuable feature for many businesses.

    3) Without a doubt, MS will abuse this technology to lock their customers into the new Office document format, which they will further abuse to limit document exchange from MS to third party applications.

    The problem here is not 1) and 2). Those are perfectly reasonable features that most businesses want to buy. The problem is 3), the vendor lock-in issue. The Open Office project could write the same kind of DRM services into their suite, while at the same time offering document portability to those who hold top level keys to an organization's documents. IMO, this is where they should go long term, since it's obvious MS has hit upon a valuable technology - but like they're always abt to do, they're first instinct is to use the new technology to lock their customers in rather than sell their customers on their new features, quality engineering, and support. Businesses want both the DRM controls and document portability across a wide range of applications. MS always fails their customers in this regard and that's one reason why they've got such a bad reputation.

    JMO.
    Maynrd

  54. Change the headline. by Elwood+P+Dowd · · Score: 5, Interesting

    "Newest MS Office to have encryption features."

    Would anybody be upset if they integrated PGP into MS Outlook? No? Well, now they're doing it with Word. This is fine.

    Obviously, encryption would require changes to the file format. This is a pretty standard sort of upgrade arm-twisting. They're adding a new feature. Woo.

    --

    There are no trails. There are no trees out here.
    1. Re:Change the headline. by ewhac · · Score: 2, Insightful

      "Encryption features" does not imply a server requirement. Indeed, all of what is in MS's proposed feature set can be accomplished through intelligent deployment of OpenPGP-compliant encryption. No proprietary formats (or proprietary servers) necessary.

      Obviously, encryption would require changes to the file format.

      This is also incorrect. File format is orthogonal to encryption. Indeed, PGP and GnuPG can encrypt Word files today -- you don't need to wait for Microsoft's broken and incompatible implementation to get it.

      Schwab

  55. You wish. by OrangeTide · · Score: 5, Interesting

    You all hope this would backfire and blow up in Microsoft's face.

    I think that is wishful thinking. "Why?" you say? It's quite simple, Microsoft has proven to have more business saavoy than anyone here. I'm just going to trust that Microsoft knows what they are doing when it comes to manipulating the market.

    This is just yet another slashdot pipe dream of the demise of Microsoft, Think about how many other articles showing how MS will fail there have been here.

    --
    “Common sense is not so common.” — Voltaire
  56. Notes has done this for a DECADE by gelfling · · Score: 2, Funny

    Looks to me like the 'next' 'version' of Office will vaguely lash Office DRM with Outlook to provide something like Notes 2 circa 1995.

  57. I also want to say hey... by siskbc · · Score: 2

    ...to all the mods who gave me a "-1, Paranoid" every time I said that M$ would figure out a way to use the DMCA as a way to keep other companies from opening their files. I was riiiiiight! ;)

    --

    -Looking for a job as a materials chemist or multivariat

  58. Re:I swear...(choose? competing?) by gosand · · Score: 2
    Whenever I ask people why they choose MSWord over a competing product, I always get the same answer: "It has more features."

    Really? I always get "What else is there?" or "It's what everyone uses".

    You use the words "choose" and "competing product" lightly. Several people I know loved Word Perfect, but finally had to switch to Word because that was "the standard". One of the big reasons MS has done so well is because they got into the businessworld.

    Ask all those people where they got MSWord, that answer is usually one of...

    I borrowed a copy from a friend/family member

    I borrowed a copy from work

    I downloaded a copy from the internet

    I don't know

    --

    My beliefs do not require that you agree with them.

  59. Embrace, Extend, Register with the DMCA. by johnthorensen · · Score: 4, Insightful

    Well, looks like Microsoft finally figured it out. DRM file formats and protocols have been on my mind for quite awhile as potential tools that they could could use to *specifically* target Open Source. Here's why:

    What Microsoft will do with the Word DRM is "license" the technology to other commercial interests that wish to maintain file compatibility. They know that THIS is the wedge they can drive into things to split off the open-source projects, because A) no self-respecting open-source project would license MICROSOFT technology, and B) even if they would, they likely couldn't afford it.

    Look for this to happen with the next round of media file formats as well. On a more sensationalistic note, what if MS bribed say, NVidia to DRMize their hardware interface. Nobody could then make calls to that hardware without either having a license or violating the DMCA. Again, commercial interests can afford the license, but do you think RedHat and such would like to bankroll Open Source's hardware compatibility licenses? Perhaps at first, but eventually I think not...

    Watch out.

    -JT

  60. Surely you jest? by kylef · · Score: 5, Insightful
    This kind of blatent abuse of the law is just another step towards neo-monarchism, and more loss of freedom for the common person.

    OK. Let me get this straight. A private company introduces software that basically introduces built-in encryption for word documents, spreadsheets, and email. This technology is designed to allow companies to prevent emails and documents from accidentally "leaking" to the press or into the hands of corporate spies. This won't even affect the home user AT ALL because home users don't have the necessary software to make use of IRM anyway (it requires a separate Windows 2003 Server in addition to MS's Information Rights Management software).

    And the availability of this product is somehow an example of "blatant abuse of the law"? I think some people here are suffering from some kind of paranoia.

    1. Re:Surely you jest? by Crispy+Critters · · Score: 3, Insightful
      'A private company introduces software that basically introduces built-in encryption for word documents, spreadsheets, and email...And the availability of this product is somehow an example of "blatant abuse of the law"?'

      You miss something. These features are awarded special protections under the law. The concern is that MS is trying to use a loophole to extend these special protections beyond what they were meant to be. This is an abuse of the law. The features themselves are not at issue, but the effect of the features in the context of the DMCA.

      And stop calling me Shirley.

  61. It will never work by dcavanaugh · · Score: 3, Interesting
    Microsoft can't turn off backwards compatibility overnight, because most of their customers will need to send documents to people with older versions of Office. This means they have to maintain the ability to read/write legacy Office formats.

    It's a Catch-22 for Microsoft. Either force people to upgrade by mandating DRM (and risk losing everything), or continue supporting legacy versions (and eliminate the incentive to upgrade or use DRM).

    I think the only customers who will be "locked into" an Office upgrade are those dumb enough to use the DRM features. The Darwin effect is coming soon, to an office near you.

  62. Re:The straw that broke the PHB's back? by Cujo · · Score: 2, Interesting

    I think you're assuming that PHBs are rational. They are epecially irrational when the FUD sets in. I have little hope for this, since they're accustomed to buying whatever line MSFT feeds them.

    Has anyone noticed that MSFT's stock sort of peaked about 9 months ago and hasn't seen much improvement in the latest run-up of tech stocks? They're looking for something, anything, to convince Mr. Moneybags to slap down even more big honkin' purchase orders to get their stock moving again. As one of the most closely followed companies in the world, their predictable earnings growth has already been discounted, so they need something new, and in a near monoploy, something new is hard to come by.

    --

    Helium balloons want to be free.

  63. Re:OT what does Esquire mean? by Xerithane · · Score: 2, Funny

    The dictionary is your friend, and it doesn't make you wait 20 seconds to see your result.

    --
    Dacels Jewelers can't be trusted.
  64. DRM - the surefire way to destroy IT by cheros · · Score: 2, Insightful

    Okayyyy, let's look at this properly. You have data going in, data going out, and all of that over a series of devices (servers, gateways, firewalls, desktops, maybe tape streamers etc etc). All of this stuff has to be DRM enabled not to create a hole in this scheme. Am I the only one to spot a rather obvious problem here?

    You are busy with sprinkling multiple single points of failure into the IT that has to support your business, and you don't have a way of disabling it for diagnostics if it dies for some reason (and it will, you're not exactly talking about mature technology here). Worse - someone else DOES have an on/off switch to your own Intellectual Property. So, the next time you have en equipment failure or the next time your accounts department forgets to pay MS protection money (just to give it a different name), imagine what's going to happen. Given that you have signed away all redress by accepting the usual shrinkwrap EULA you just *may* have a problem.

    Try explaining that one to your shareholders. Oh, and try claiming that off your corporate insurance. You'll probably get a cheque: about $1 for the entertainment you've given them. You may, however, get taken to the cleaners for liabilities yourself (for example, if you happen to host data for other people). I can really see a bright new market emerging for China and Korea for non-DRM equipped kit. Once the consequences of DRM dawn on corporate America you won't be able to sell a DRM enabled piece of kit for more than scrap value, but as usual we will have to make the mistake first before we realise what mess we got ourselves into.

    --
    Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
  65. How to short-circuit this by Todd+Knarr · · Score: 4, Interesting

    Get the company legal department and managers involved. Point out that company policy and/or the law requires certain things be done with documents, eg. certain finance-related documents must be kept for certain lengths of time or the company can face fines, certain documents must have file copies made, policy dictates that certain people receive copies of documents. The DRM features in the new Office software may, depending on what the sender sets, prevent the required things from being done. If the creator specifies "no copies", archive copies of financial and/or legal documents couldn't be made which must be made. Since some of the senders may not be within the company and may very well have good reason to prevent a record being made, this could put the company in the position of being legally liable while not being able to control their liability. That's the kind of stuff that makes lawyers nervous, and the lawyers have the ear of the board of directors and executives.

  66. What's the big deal? by inertia187 · · Score: 2, Informative

    What's the big deal here? You can do this now by wrapping your word document in PGP. Only, this DRM is managed by a central server and supported internally by the document. Yeah, a DRM protected document couldn't be read by a machine that doesn't participate with the central server and/or can't read the new format, but that's just how it's implemented. If I emailed a PGP protected document properly signed for the person I sent it to, and they don't have PGP installed on that machine, they can't read the document, regardless of the OS. So I'd have to send them an unsigned version. The DRM end users would realize that they can't us the "Protect This Document With LAN DRM Settings" option. They'll learn quickly to avoid it if the company policy allows it.

    --
    A programmer is a machine for converting coffee into code.
  67. Forward In-Compatibility: Nothing New by DaRat · · Score: 2, Insightful

    It's nothing new for companies to introduce products which save files in a format that older versions can not open. It is rare for a company to do that with every new version, but it happens.

    To expect that a person using Microsoft MiscProduct 1.0 will be able to open a file in MS MiscProduct 10.0 format is a bit much. Now, if MS MiscProduct 10 couldn't save in something that MS MiscProduct 1.0 could read, then you might have more room to complain.

  68. Cut-and-Paste Strikes Again by r4lv3k · · Score: 2, Insightful

    Will cut-and-paste violate the DMCA?

    If I have a document that doesn't allow printing or forwarding, what keeps me from pasting the text somewhere else and printing or emailing it? You can do that with Acrobat's print-protected PDFs, and it has had "DRM" for some time now.

    Okay, maybe they thought of that... just maybe. One could still take screenshots and run it thru OCR software.

    Who would do that, you ask? Well, anyone interested in distributing the information badly might do it. And if the whole point of this DRM is to prevent that sort of mischief, it is a false sense of security.

    And it wouldn't be too difficult... An auto-scrolling screenshot capture tool could pull it off quite nicely.

    r4lv3k

  69. No need to over react - this changes nothing by Osrin · · Score: 2, Insightful

    Surely a user will have the choice of pushing the DRM button or not... if they don't push it then the playing field is still level, if they do push it then they did so for a reason.

  70. Re:MOD PARENT UP +1 INFORMATIVE by Richard_at_work · · Score: 2, Informative

    screen captures can be prevented from within the win32 api, i have seen it done. Basically the screen capture happens as tho the window isnt there and you get whatever is behind it.

    And typing documents out again? I think someone will notice you copying word for word a document over a period of time, and ask you why you arent doing what other work you have to do. Basically it will take a lot longer for you to copy the doc, and there is a much better chance of you being discovered. (and think jsut how much information is removed from the business on a impulse by a disgruntled emplyee, much more than what is removed based on a well thought out and timescaled plan)

  71. Whaa??? by Trolling4Dollars · · Score: 4, Interesting
    I certainly hope the OpenOffice team will kick development into high gear. If there was a time we need a viable competitor to Office, it's now.

    Don't get me wrong, I LOVE OpenOffice.org. But I don't see how getting into "high gear" is going to do any good unless OO.o manages to completely revolutionize the office suite paradigm far beyond what MS has. OO.o is a great *alternative*, but it's not really doing much more than MS Office does and there are some features missing. To get "mind share" (profit can go to hell since that's not why most of us are here), OO.o is going to have to provide above and beyond what MS Office provides. Is that possible? I don't think it is.

    Sure, some people might want to jump ship when they figure out that MS is going to hold them hostage with DRM. But that's only going to be a small fraction of office suite users. The majority will grudgingly hand the cash over to MS and upgrade. The only way to get more people to WANT to move over to OO.o or some other alternative is to provide exactly what most coders despise: features. This is what Joe Average is interested in. Yes, I am aware that OO.o has some features that distinguish it from MS Office, but it's not enough of a difference to really count.

    An example of a feature that an average user would find "useful" no matter how stupid it might sound to a true geek, is say... self-contained executable documents. If a user could write something and then save it as a "self contained" document that was platform independent, I think it would be a feature that goes beyond MS Office. Think about it... the user saves the doc and then e-mails it to someone. The recipient can then just open the attachment WITHOUT needing to have OO.o installed on their machine... or MS Office... or ANY office suite. Instead the document itself comes with an exectutable that provides basic reader fearures, possibly an executable that will install a lightweight editor, or even contains an editor itself. Obviously it wouldn't have all the features that OO.o contains, but just enough to read and maybe edit.

    Or... maybe the document would never get sent to the recipient. Instead the document would remain on an HTTPS accesible document store. The recipient would get an attachment that contains authentication to allow seamless access to the https document store and a path to the document. Along with this document store is the ability to "edit locally" which would give the user the option to run an editor over the HTTPS link or use a locally installed editor depending on the situation. This would go well beyond anything the MS Office suite does now and would appear to be far beyond MS's current mode of thought.

    That's where things need to go if MS is to be usurped of the office suite mindshare that it currently posseses.

  72. I concur && mod parent up by dodell · · Score: 2, Interesting

    You know, I was thinking about this just today. I realized that they can't just do this without providing an option to turn that kind of "encryption" off. The last I heard, they were doing the same thing with Windows Media Player.

    I have and continue to produce my own (really bad) music. If I am using Windows Media Player to rip (or burn) a CD of my stuff and I want to distribute it for free (I own every imaginable right to the music), then I should be given the option to turn this off.

    I think that if they don't provide an off switch, a lot of companies are going to get pissed off and find viable alternatives.

    Another thing to think of: will they be doing this upgrade for Mac as well?

    I concur with your points. Documents that I write must be portable. People already get pissed off enough that I use OOo (because it doesn't do all the formatting Word does) -- I don't need to be forced to buy Microsoft products to do my work effectively. This is, shortly stated, what we would call a monopoly. Point blank.

  73. Take off the tinfoil hat by Overly+Critical+Guy · · Score: 3, Insightful

    This feature is off by default. Certain companies will want to lock-in their documents. This is a 100% complete non-issue.

    --
    "Sufferin' succotash."
  74. Re:Only when the document creator chooses to lock by bpowell423 · · Score: 2, Insightful

    You're not looking at it the right way. All they have to do for vendor lock-in is to make the Office 2003 file formats for .doc, .xls, etc incompatible with previous versions and use some form of encryption. Doesn't matter how good the encryption is, it'll be illegal to decrypt it (DMCA). We use a cad program at work that silently encrypted our cad files. Simply opening and saving the file with the new version of the software upgraded the format to the encrypted version (without you knowing about it). There was an outrage against the company (not Microsoft) after all the users figured out what had happened, but it was too late. All those files can now be opened in that application only. We only found this out when we wanted to switch to a different cad system, and the files couldn't be converted. Of course, we always have the option of redoing all that work in a new cad system! My guess is that if you use Office 2003, you'll be locked in to MS Office forever, unless you're willing to re-create your documents in something else.

  75. They can do this now... by sterno · · Score: 4, Interesting

    Unless the rights to print such a document are still allowed, it would mean that corporations can get away with hundreds upon hundreds of scams, illegal activites and everything else that our nation's current corporate climate has bred.

    This isn't going to change anything. Today a technically competent corporation can secure documents using certificates, PGP, etc. If they really want to cover their tracks they can do so. Better yet, they can do their dirty work only on paper, then shred it when the feds show up. Seemed to work just fine for enron.

    --
    This sig has been temporarily disconnected or is no longer in service
    1. Re:They can do this now... by Frogg · · Score: 5, Funny
      Today a technically competent corporation can secure documents using certificates, PGP, etc. If they really want to cover their tracks they can do so.

      ..only now it'll be as easy as clicking a checkbox -- or perhaps:

      Clippy: Hi, I can see you're trying to [take over the world] -- would you like me to enable DRM?

    2. Re:They can do this now... by interiot · · Score: 2, Interesting

      But hardly any corporation takes the effort to properly secure things like this. The reason? Because there's a trade-off between security and usability, and most people discover that security is generally a pain in the butt. DRM won't change that. All DRM will change is that the general public will find out firsthand, and magazines will have a little more to write about.

  76. READ THE FRIGGEN LAW by C10H14N2 · · Score: 3, Informative

    The DMCA clearly and unambiguously allows reverse-engineering and circumvention to achieve interoperability.

    Don't just assume and feed absurd conspiracy theories. READ THE LAW.

    http://www.loc.gov/copyright/legislation/dmca.pd f

  77. Analog my friend... by sterno · · Score: 5, Insightful

    Or you just get out your trusty camera and take a picture of it. If you want to get higher tech, capture the EM signal generated by the monitor. It's just like bypassing music DRM by recording from a line out. This sort of security will stop casual snoops, but somebody who wants the information will get it.

    --
    This sig has been temporarily disconnected or is no longer in service
    1. Re:Analog my friend... by mpcooke3 · · Score: 2, Funny

      Yes it's important not to have any weak points in the scheme where unencrypted documents could be viewed. I expect they've already discovered this major flaw in the Longhorn DRM.

      I've been lobbying Microsoft to include .NET DRM implants in my brain where documents and music can be decrypted safely. The .NET implant will also have a remote access function like XP so that a Microsoft support technician can help me read documents, listen to music, go to the toilet, etc.

      Then I won't be able to do anything without paying Microsoft first. This will finally make the world a safe and secure place.

      Matt.

    2. Re:Analog my friend... by Linker3000 · · Score: 2, Funny

      What monitor?

      You obviously haven't read the follow up article relating to the planned compulsory DCI display technology...Can't find the link at the moment, I'll post it later...

      "Direct Cortex Injection will enable a high resolution 'display' image to be transmitted directly to the recipient's visual cortex where decoding of the encrypted data stream will be carried out by a pair of transceiver chips attached to the user's optic nerves. Several levels of public and private key encryption, coupled with authentication by the recipient's DNA signature will make the transmitted signal impossible to intercept.

      Multicast modes will allow meetings and conferences to be 'viewed' by multiple recipients, provided that they accept the transmission using the appropriate sequence of evey movements against the virtual control interface.

      Initial plans specify a low-power interface with an intended reception range of 30m, but wide-area use, such as real-time news broadcasts and opt-in advertising (rewarded by credits posted direcly to the receipient's bank), are planned for phase II roll out.

      Power for the transceivers will be made by the innovative bio-glucose process recently unveiled.

      Other uses for the technology include education during sleep, remote projection of images between persons (imagine 'being' at the party you're not 'at'!!). DMCA control will prevent one host from retransmitting copyright images, such as films, live concerts and corporate sensitive documents. One further development envisages an in-built cache to store several minutes of recent events as viewed by the host, with the images being retrievable by law enforcement agencies in the event of a fatality or accident (bio-glucose power being available for roughly 18 hours after the death of the host) A decision whether the implantation of DCI transceivers should be made compulsory has not yet been made although several organisations are believed to be pursuing this issue through various lobbying groups."

      --
      AT&ROFLMAO
  78. Re:A Solution: Report piracy by MImeKillEr · · Score: 2, Insightful

    Every time you see someone using a pirated version of a Microsoft product in a system that helps maintain the lock-in, mailing you Word docs or similar, inform the Business Software Alliance.

    And how do you know they're using pirated copies? Does the word document's headers contain anything special that says as much? No, it doesn't.

    Like it or not, piracy is good for software vendors. The more people you have using it, the more mainstream it becomes.

    After everyone's hooked, you move to a registration scheme similar to XP's (take Adobe for example -- the next version of PhotoShop).

    Unless and until GPL applications with the same features (and ease-of-use) come along, people are going to stick to what they know. No GPL application will have an easy fight getting users of pirated software to convert. By the time the GPL program is out, the users are used to the other application's menu structure and use. Unless said application mirrors the pirated program exactly, people will resist changing.

    --
    Cruising the internet on my TI-99/4A @ a whopping 300 baud!
  79. Information flow NIGHTMARE! by Tsu+Dho+Nimh · · Score: 5, Insightful
    Oh wow ... given the numbers of PHBs who already password protect presentations and send them out without the password, which they promptly forgot, this should be a productivity enhancer.
    • The critical presentation EXPIRES the night before you need it.
    • The only person with the rights to open a document is sick and didn't make the meeting.
    • The BIG customer tells you that they are not about to upgrade their servers and corporate software just to read your documents and tells you to provide material they can read or forget it.
    • They will have to have FULL-TIME rights managers, who track who is entitled to read whose documents.
    • And a full-time Search and Rescue team to retrieve lost documents, crack lost passwords, etc.
    1. Re:Information flow NIGHTMARE! by dublin · · Score: 2, Insightful

      The DRM features I see actually described, in the article (did anyone actually bother to read it?) and through a couple of links in other posts above, are not terribly troublesome. Unfortunately, the paranoic responses here obscure that reality.

      In fact, what MS has here is really nothing more than an MS implementation of a PGP equivalent with an authentication server and app hooks that know just a little bit about how the assigned rights relate to the nature of the files they're dealing with.

      Let's take these paranoic rantings one at a time, shall we?

      The critical presentation EXPIRES the night before you need it.

      Could happen. You could also set the permissions on the file so that you can't read it. Why should this tool be a panacea to eliminate human stupidity? It won't be. This is a "power tool" - power tools can kill.

      The only person with the rights to open a document is sick and didn't make the meeting.

      Again, this one could happen, but if it does, it just shows that your group has woefully inadequate processes and procedures for assigning access to documents. (And how this is significantly different from that person having the copies in his briefcase and the source file in a non-open subdirectory on the server is not clear...) One presumes (since this is based on AD) that those higher in the auth chain could always override such assignments. In fact, this is one real benefit to a server-based auth method - it's effectively impossible to leave things locked up forever, or have rogue employees leave working time bombs.

      The BIG customer tells you that they are not about to upgrade their servers and corporate software just to read your documents and tells you to provide material they can read or forget it.

      This one would only happen if you were stupid enough to try to cram you auth methods down your customer's throats. You can do that with suppliers (although it's a losing move), but never customers. Generally, I expect this will not be widely used between companies, especially given the difficulties in establishing trust (both technically and humanly) between organizations.

      They will have to have FULL-TIME rights managers, who track who is entitled to read whose documents.

      You've never worked in the real world, have you? These people already exist, and have for better than 40 years, going back to NASA and the military-industrial complex. Their function is called "Configuration Managment" (do a Google search), and the idea is that these people determine what is kept, where, how, for how long, and who is allowed to use it in what ways. These are vital things any organization needs to do to manage information on a non-trivial scale, regardless of whether that work is building stealth bombers or growing organic kumquats.

      And a full-time Search and Rescue team to retrieve lost documents, crack lost passwords, etc.

      If it's any good, cracking will be fruitless. (I'll hold my judgment in reserve until I see MS implement real safety, but AD, for all its warts, has some really cool and elegant aspects. It's really too bad there aren't any interoperable alternatives.) As I mentioned above, the recursive nature of rights flow in AD (or any other decent auth system, such as Novell's Netware or NDS) should allow any employee's boss or other delegated person to override and/or reset rights.

      In all, this is a decent solution to a very real problem. Unfortunately, it will certainly not be interoperable or standards-based, at least until and unless the Samba guys ever get a real interoperable AD replacement. And in big "enterprise" accounts, this will be a compelling feature that may persuade some customers to upgrade, something they are loathe to do now.

      It's worth noting that there's no reason the same features couldn't be done in a completely open way if someone wante

      --
      "The future's good and the present is nothing to sneeze at." - Roblimo's last ./ post
  80. No suprises here by raw-sewage · · Score: 2, Insightful
    Quoting the article:


    Dan Leach, Microsoft's lead product manager for Office, said rights management features were built into the new Office based on ongoing discussions with customers.


    "We asked people what types of things would you like to do that you can't do now, and what they said is they'd like to spread large amounts of information around to more of their people--but they have concerns that the wider they spread information, the more likely it is to become available to the wrong people," he said.

    ...So they cooked up the least compatible solution possible. Sorry, I'm either preaching to the choir or just venting, but Microsoft's business strategy is a game of answering the following question:


    What can we do to best eliminate competition or exploit our monopoly while passing it off as innovation or being customer driven?

    I feel that the article actually puts Microsoft's new scheme in a positive light! This needs as much bad press as possible! When will the general population realize that Microsoft is very rarely innovative? And that virtually every business move of theirs is in the interest of stifling competition?


    If Microsoft didn't have a monopoly, they couldn't pull off half of the stuff they do.


    There are many ways to solve the user's problem above that do not involve vendor lock in or forced obsolescence. In fact, this could be the killer app for Linux and all of open source: integrated crypto for the Linux kernel and OpenOffice.org. Make security inherent in the total system, but use established crypto systems. DRM can be delivered with open source!


    I once heard that Burger King never does location research. They just wait for McDonald's to build a restarant and then BK builds their own nearby. Well, open source might as well use the market research that Microsoft makes available---let open source deliver customer solutions that actually benefit the consumer.


    I believe there is something to be said for not caring whether or not open source gains market share. Well, I don't care about market share, but I would like to be able to use my Linux desktop and not worry about compatability with everyone else. I'd like to be able to receive documents from my friends and co-workers and not have to request a non-proprietary data format. I'd like to be able to buy hardware with OEM-level Linux support. I'd like to be able to recommend Linux to my friends without caveats. Unfortunately, these things won't be possible until Linux has significant "market share". I would nearly bet my life that Microsoft's Office monopoly is what keeps open source from gaining significant market share. I think that, any more, MS Office enables the Windows monopoly! Microsoft knows this and they are milking it for all it's worth.


    Microsoft is no different from any other company faced with a similar situation: they recognize a critical event in their market (the emergence and spiraling popularity of open source) and they realize they must take drastic measures to keep or increase their market share (lock everyone else out at any cost). Such a monumentous undertaking will require Microsoft to put a lot at stake. Unless open source---and educated consumers in general---respond with equal effort, Microsoft will come to own your digital world.

  81. Re:Problem for MS in a different way by MImeKillEr · · Score: 2, Insightful

    Many times I have been sat at my desk and read something that is internally confidential to my company posted on an external web site... this is hugely damaging for the company and it's reputation. As a senior exec I would buy off on anything that allows me to keep my confidential information confidential.


    Somehow, someway stuff will get leaked. Its inevitible. Whether it be by accident, carelessness or malice - it'll get leaked.

    Sure, this'll slow it down. But how much do you want to bet that MS will offer MSDN users tools to break the docs? How long before some CEO or CIO forgets his/her password and needs to get into a protected doc?

    It'll happen. And when it does, the info will make it out. This is simply a band-aid.

    --
    Cruising the internet on my TI-99/4A @ a whopping 300 baud!
  82. Re:Office 2003 DRM: It's Very Cool and Not Insidio by sharekk · · Score: 3, Insightful

    The DRM feature in Office and Outlook enables a user to prevent emails and documents from being forwarded to and viewed by people not specified by the sender/creator.

    I presume this means that every email you forward to me has to be read in outlook. Somehow I don't think Microsoft will write a plugin for lotus notes (what I'm stuck using at work) or PINE or mutt. So now I'm forced into using a Microsoft product which I'll have to pay for to read all those emails. And a couple of versions in the future I may no longer be able to copy/paste between half my emails and documents because people got used to leaving the DRM button checked. And I won't be able to make easy backups of my email because the DRM thinks I'm making illegal copies and sending them on...
    If I want to keep something anonymous I just tell people in person. I'd much rather do that than deal with all the potential hassle.

  83. Re:There is no problem but Slashdot by sydb · · Score: 2, Informative

    Your sig:

    LinuxSecurity - All the Linux vulnerabilities Slashbots don't want you to see


    You are such a troll! Most of those vulnerabilities are for applications! Many of them are just freaking bug reports! If Microsoft was held responsible for all the non-Microsoft applications then you'd be comparing apples with apples.

    GNU/Linux distros include all those applications. But you don't have to install them!

    Take a minimal Windows install and a minimal Debian GNU/Linux install. Or take a Windows box and load up a selection of applications from various vendors and a selection of stuff from downloads.com, and compare it with a reasonably complete Debian install. Then I will be able to take your criticisms seriously. As it is, you are overly critical.

    --
    Yours Sincerely, Michael.
  84. Microsoft would never win this suit by sterno · · Score: 3, Interesting

    If Sun or some open source team developed an import filter that circumvented microsoft's drm, microsoft would never win a legal case against them. It's easy to use the DMCA to try to go after people who have all the appearance of pirates. It's an entirely different thing to go after a corporation that's clearly using the cirumvention to provide compatibility and competition.

    Furthermore, if Microsoft won the DMCA suit, they could be immediately prosecuted for using the DRM as a lockout to maintain their monopoly. Hell, they could be sued even before that.

    --
    This sig has been temporarily disconnected or is no longer in service
  85. Do some research everyone! by merlin_jim · · Score: 5, Informative

    Number one most important feature of this that it seems noone is getting:

    This is just Public Key Cryptography based on open and documented standards!

    How do I know? I was there when it was announced. In early June at TechEd 2003 in Dallas Texas. Some Korean VP of Verisign showed it off. His accent gave it a very scary "All your base are belong to us" kind of feel, but there it is.

    Here's the press release from that day:

    http://www.verisign.com/corporate/news/2003/pr_2 00 30603b.html

    Please read this before you spout off one more cockeyed comment on how Microsoft is evil cause you won't be able to read this on the plane or how it's proprietary and noone will ever understand it or work with it ever again.

    --
    I am disrespectful to dirt! Can you see that I am serious?!
  86. Tempest in a Teapot by ediron2 · · Score: 5, Interesting

    As much as I hate the idea of being sucked into XP or 2003, let alone Office getting DRM built-in,

    1 - The rights-management stuff is off by default, says the article.
    2 - I do infosec work regularly and I can't get people to use good passwords, and the further from geekdom they get, the faster they forget or circumvent password mechanisms. That's something easy. Key management and other DRM aspects are complex enough to get wrong any one of a dozen ways (either too tight or too loose).
    3 - Imagine a pointy-hair reacting to you telling him that he just DRM'd his ass out of his own spreadsheet... forever.

    I predict this 'great idea' will be rarely used since 99% of people can't be bothered to do much easier and less dangerous security tasks. Further, some companies will probably just ban it's use (since an employee can lock the boss out or stuff could accidentally get wrongly locked). It will inspire fear when people get burned. And a fair number of 'forced adopters' will go to gray market earlier versions and stop the upgrade treadmill completely, or jump to alternatives.

    Oh, and imagine the fun if it does get put in: the boss makes you work overtime to get a report in by Friday night (Monday won't cut it!), so you stick in DRM to expire it at 9am Monday, so he has to call for a resend. Send inflamatory messages with a one-read, no-print, expires-forever rule so your flamage has a chance of evaporating after impact. And the geek-chic power of being able to screenshot someone that does the same thing back at you and get their ass fired.

    A last comment: if you want to help the undoing of the MSOffice stranglehold, take stock of your own personal and business relationships and pressure anyone you can (not customers, not the boss or people who will hurt you for doing so) to use non-office methods. Politely ask sales drones to resend stuff in a non-Doc/Excel/Powerpoint/Viso format. When asked, spread FUD!: blame microsoft-laden viruses and them being less-trusted. But start the revolution by inconveniencing them. The monopoly is due to habits.

  87. Re:The straw that broke the PHB's back? by Enucite · · Score: 2, Insightful

    Try out OpenOffice 1.1
    Startup time is much lower--it starts faster than MS Office on the Windows machines I've seen--and it has many new features.
    It's still in the RC stage, so you may want to wait until the official release; but it's much better than 1.0 so--depending on the number of users you're managing--you may consider moving to it now and upgrading to the final release when that's out.

  88. Teach people about freedom to preserve your own. by jbn-o · · Score: 4, Insightful

    But five years from now, when everybody buying a Dell or Gateway machine has the latest version of Office bundled with their machine, I will likely be the only guy who can't read their documents, and their sympathy will have disappeared. I'll have to upgrade.

    There's no particularly good way out of this using the marketplace; the marketplace will dictate it.

    If you give up on freedom, precisely what you describe is likely to happen because people are not going to give up word processing or editing databases, so they'll go with whatever software is available to meet their needs. There is another path: teach people the value of software freedom.

    The Free Software movement proves that "the marketplace" is not the almighty immobile force you describe (or perhaps you're just interpreting too much in terms of the marketplace in order to make it appear unchanging; hence whatever happens it will be seen through that lens). When the GNU project began, many people said nobody would write software without being paid and when people are paid to write software, they are being paid to write non-free software. History clearly shows those people were wrong. In fact a number of the organizations that distribute non-free software now use the GNU Compiler Collection (gcc) as their chief compiler, and ship part of the rest of the GNU operating system too. People have been paid to write Free Software and governments are getting the idea that their people's ability to communicate freely using a computer rests on using Free Software.

    I think the key is to teach more people about software freedom. Take this opportunity to show people that with Free Software you won't be beholden to any proprietor's interests. As the pool of people using Free Software grows your chances for being able to get by with Free Software grows too.

  89. Adobe has done this for years... by pointbeing · · Score: 2, Insightful
    Actobat has had these features for years. I find it interesting that all the howling begins when MS decides to follow suit.

    Anybody with more than cursory Acrobat experience knows you can restrict reading, editing, printing and even the Windows clipboard when you create a PDF.

    --
    we see things not as as they are, but as we are.
    -- anais nin
  90. Monarchy??? by El · · Score: 2, Insightful

    Uh, wouldn't corporate domination be called something like "autocracy"? I don't know of any corporations headed by a king! In fact, by definition, corporations are owned by shareholders... which in the US means that over 50% of the population are at least indirectly in charge of these evil corporations! If you don't like what a corporation is doing then convince a significant portion of the population to boycott that corporation's products! The problem is not that there's some evil conspiracy between government and corporate interests, the problem is that 99.9% of the people clearly don't give a shit! Educate them!

    --

    "Freedom means freedom for everybody" -- Dick Cheney

  91. Re:Prohibited by law from accessing your own docum by LurkerXXX · · Score: 2

    Uhh, how about reading the article? In order to use the new features you will have to also have a windows 2003 Server running with Windows Rights Management Services software running on it. Not exactly something a home author will have lying about. Besides, no one forces you to turn on the feature, or prevent you from saving a copy in rich text or some other format. Get a grip and stop FUDing.

  92. VB-type scripting in Spreadsheets - OpenOffice by Decaff · · Score: 4, Informative

    Open Office 1.1 rc3 does exactly this. There is a macro recorder that produces Basic scripts. This will run unchanged on Windows, Linux, Solaris, and MacOS/X.

    http://www.openoffice.org

  93. Processed log food is shit by A+nonymous+Coward · · Score: 4, Interesting

    Do you think MS doesn't even use their own software?

    It doesn't matter if M$ uses their own software, they don't produce even good crap. At least from my experience, it doesn't matter whose dog food they are eating, it is still processed dog food, i.e., shit.

    One. In 1987 or so, I had to use the M$ debugger. Whenever you stepped into a C subroutine that it didn't have the source for, it dropped automatically into asm mode, and when you stepped back into the source code, it did not erase the registers and other parts of the asm debug display before putting the source code back on the screen, so it was a weird mixture of asm register leftovers and source code and line numbers. How could they ship crap like that, did they never use it themselves?

    Two. In the early 90s, I had to use Word to maintain technical documents. Whenever we revved the software, even for minor tweaks like the copyright date, we also had to rev the documents. So we would edit, changing only the date and rev number, and it would screw up the pagination, with the last page printing as page 33 of 32. This happened maybe half the time. Sometimes a quick change and backspace would cure it, sometimes a print preview, sometimes half an hour of cursing and fussing would be required. You will never convince me they hadn't encountered this bug themselves. We all ran into it.

    Three. Several years ago, I had to use the M$ development environment. In the first day alone, I found four bugs. Now maybe I just don't use it like the manual says, but they shouldn't have been present anyway. The only one I remember now is that I would click on the button to add a function or variable, it would do so, I would hit the X to close the window, and apparently that was not the proper way, because the next time it had to open that file, it would yap that the disk file had changed, horrors, should it reload?

    I hardly ever use M$ software, those three periods were probably the only times in the last 15 years, which means they are 3 for 3 in producing shit. That's a pretty atrocious record.

    M$ produces crap software. That is why I have never liked their products, along with frozen unconfigurable features, lack of control, updates which introduce incompatibilities just for the sake of forcing upgrades, and so on. Dislike of Bill Gates' ethics is a poor second to all these reasons.

    1. Re:Processed log food is shit by 16K+Ram+Pack · · Score: 2, Informative
      I've been having great fun with Microsoft's DTS in SQL Server today.

      I'm getting an error reported half way down the file. If I edit the first record in a certain way, the error goes away.

      If that's not dogshit, I don't know what is.

  94. READ THE ARTICLE, people. by CatOne · · Score: 2, Informative

    This doesn't automatically enable DRM in all documents. What it does do is make it POSSIBLE to enable DRM in some documents, when a Windows server is used.

    Now, I can certainly see where people would WANT the ability to control distribution of specific key security-sensitive documents. And in those cases, sure you'd want tight controls on who could read it (and, what they would use to read it). So this would make sense.

    But this isn't just a plain old proprietary document lock-in. Probably 99% of documents will still be non-DRM'd and open, and the 1% that aren't, well the people who enabled the DRM don't WANT joe l337 haxx0r reading them.

  95. Illegal only in the US. by emil · · Score: 4, Insightful

    Most nations do not have a DMCA. The decryption work will simply be performed outside the sphere of influence of this facism.

    Microsoft could choose to emulate Adobe and trigger an FBI investigation of OOO within the borders of the US. In doing so, they would trigger a fight with Sun.

    Sun is much larger than Elcomsoft, and it would be the fight of the century. It might actually be the key moment where the IT industry overthrows the DMCA (as should have happened some time ago).

    When Sun wins (Microsoft legal will find a way to screw it up), the DMCA will suffer a mortal blow. Congress would be extremely unwise to attempt to strengthen it; those who endorse such an action will face the wrath of some well-organized lobbiests.

    Microsoft, choose your battles carefully.

    1. Re:Illegal only in the US. by sean23007 · · Score: 2, Insightful

      (Microsoft legal will find a way to screw it up)

      No offense, but are you being stupid just for fun? Say what you will about Microsoft's crappy products, but their attorneys are absolutely unsurpassed. These guys don't just go about "finding ways to screw things up." They go about finding ways to convince judges and juries that the alleged infractions are merely illusions and that punishment would somehow stifle competition and innovation. The only thing Microsoft does well is litigate.

      --

      Lack of eloquence does not denote lack of intelligence, though they often coincide.
    2. Re:Illegal only in the US. by emil · · Score: 4, Interesting

      This is all from memory; should be easy to document.

      • Microsoft rigged demos of IE and Netscape in the Jackson antitrust trial. Netscape was on a 14.4 modem while IE was on a 56k. Jackson's wrath in the guilty verdict slashed Microsoft's share price in half (and had the unintended side effect of triggering the dotcom collapse).
      • Jackson's findings of fact allow many companies to skip directly to damages when they sue Microsoft for illegal antitrust violations.
      • Microsoft was losing the Caldera case, and settled.
      • Microsoft lost the contractor benefits case before the Supreme Court (where the contractors argued that they should be treated as employees), which cost them billions. Contractors' durations at most companies are now limited because of Microsoft's loss.
      • Microsoft has lost several patent infringement suits, which will cost them billions. Big ones were on SQL Server, the XBox, the recent IE plugin case, etc.

      Microsoft has lost most of its major court cases.

    3. Re:Illegal only in the US. by 511pf · · Score: 2, Interesting

      Shit. Microsoft beat the US government in an open and shut monopoly case. They got away with absolutely zero punishment and zero change in behavior. Campaign contributions can win any legal battle.

    4. Re:Illegal only in the US. by Jody+Goldberg · · Score: 3, Insightful

      Much as I wish this was true, history disagrees.

      Gnumeric can read encrypted xls files. The mechanism for doing it was largely worked out by Caolan McNamara for .doc files, whose notes are public. He now works on OOo, which does _not_ support encrypted files. Sun/OOo has the knowledge, but clearly their legal team has squashed the notion. You don't mess with MS' legal team lightly. Money may not buy happiness or love, but it can definitely purchase one heck of a lot of lawyers.

  96. Sony bundles Open Office. by emil · · Score: 3, Insightful

    A DRM push by Microsoft might drive a few more OEMs into this camp.

  97. Potential Legal Issues by nurb432 · · Score: 2, Insightful

    Companies cant just have pertinent documents expire at will. This is the same thing as electronic paper shredding..

    They also must provide access to the courts when subpoenaed. " sorry we cant seem to access that file" wont fly..

    However this will help lock in Microsoft's control of the office suite market.

    How long before they try to lock out online access? With the help of the Homeland Security Department, it might be possible ( you can only use 'approved' software.. and hardware )

    --
    ---- Booth was a patriot ----
  98. Re:Prohibited by law from accessing your own docum by TopShelf · · Score: 2, Funny

    Boo... hisss.... You're such a party-pooper.

    How else are we supposed to get the week going without an anti-Microsoft group tirade?

    --
    Stop by my site where I write about ERP systems & more
  99. Next project... by rnturn · · Score: 2, Insightful

    ... at home will be to prepare some response letters to the various vendors, banks, etc. that the missus and I have a business relationship to inform them that if they send us any communications that is in a Microsoft format that we will be taking our business elsewhere. If they are unable to provide information to us in a non-proprietary format, I will make it a crusade to find someone who can. I should not have to pay a company several hundred dollars for a product that I would not otherwise choose to purchase merely so I can read someone else's business communications. To date, I have been able to accept their Microsoft-based communications because of the interoperablilty provided by OpenOffice. If Microsoft pulls this little stunt and they expect me and my family to willingly go along and purchase their software, they've got another thing coming.

    I fully expect that my friends will understand this far more readily than any businesses to whom I express these feelings. They may think they have us by the short hairs... What's next? I'll have to buy a Microsoft phone so that I can receive phone calls because they use a proprietary signaling format?

    After I deal with the first business that I'm forced to drop because they insist on sending me documents in a DRM-enabled Microsoft format, my local, State, and Federal policitians will receive their copies. And I suggest that everyone do something similar. Inform businesses that you are no longer able to do business with them if they require that you use a specific vendor's product for business communications. When businesses realize that they are pissing off enough of their customers, and we let them know it, perhaps this crap will end and Microsoft will find that they risk losing their business customers. And if enough every-day citizens -- you know, John and Jane Q. Voter -- begin complaining to their elected representatives that they are being adversely affected by the DMCA, then changes will occur.

    --
    CUR ALLOC 20195.....5804M
  100. The Caching Issue by SamBaughman · · Score: 5, Interesting

    Sure, permission caching can be self-defeating if you set the cache to hold on to an authentication token for a year. But this is a general problem with permission cacing in general, and not unique to anything Microsoft might choose to implement.

    Maximum security requires frequent re-authorization. Daily. Hourly. Every 15 minutes.

    A good authentication server would be able to tell you who has a cached authorization token, so then when you decide to revoke access to a file you can tell which people have a cache token on their laptops that you need to kill ASAP.

    So far as leaking secrets to competitors, the DRM "solution" simply requires you to convert across an independent medium... printout, screenshot, photograph of screen. The only thing this "DRM" provides is the ability to mass-distribute a document within a company without worrying that someone might be on a mailing list that they're not supposed to be on... since everyone has to authenticate to read the attached document, they'd have to use an authenticated account to read it.

    1. Re:The Caching Issue by tambo · · Score: 2, Insightful

      The only thing this "DRM" provides is the ability to mass-distribute a document within a company without worrying that someone might be on a mailing list that they're not supposed to be on... since everyone has to authenticate to read the attached document, they'd have to use an authenticated account to read it.

      Yeah, that worked really well for the Germans in WWII, didn't it? ;)

      Seriously: As a general security concept, it's a bad idea to put information into the hands of everyone and rely on an encryption scheme to ensure that only authorized individuals can decrypt it. Encryption schemes get broken; even the guys who created RSA encryption have suggested methods of weakening it (e.g., quick analysis that narrows the brute-force search space for the key.) It's infinitely safer to control who has it in the first place.

      - David Stein

      --
      Computer over. Virus = very yes.
    2. Re:The Caching Issue by SamBaughman · · Score: 3, Interesting

      It's infinitely safer to control who has it in the first place.

      But that requires fixing the people in an organization, usually starting at the top of the organization. Whereas the people at the top of the organization prefer to fix the software in the organization, and are more than happy to give Microsoft their company's money.

      Besides, any "encryption" that Microsoft uses will surely have some form of key escrow, either for the companies who lose all the information on their server, for companies who have a rogue admin who deletes all access information, or for the government when it has to investigate a company for "national security concerns".

    3. Re:The Caching Issue by KillerLoop · · Score: 2, Funny

      ... and thank God that Enigma was compromised, otherwise chances are good that you would be toast by now. Bretzel toast.

  101. Then OpenOffice.org should implement it FIRST by JCCyC · · Score: 4, Interesting

    Have a nice little TCP server that authenticates a user through a SSL connection, accepts an encrypted document, see if user has permissions, and if so, decrypt data with the creator's private key and spit it back to the client OOo program, which will display it in the document window. I don't think it would be really hard to code.

    OOo people, do you copy me? (pun intended)

    1. Re:Then OpenOffice.org should implement it FIRST by 200_success · · Score: 3, Insightful

      Digital rights management requires a whole closed system to make it hard to crack.

      It's not possible to implement many features of DRM management using open-source software -- it's too easy for someone to code a loophole when the source is available.

      For example, what if you wanted to mark a document was as read-only and unprintable for everyone except the author? If OpenOffice.org supported DRM like this, one would simply hack the program to to disregard such restrictions. It would be a sure bet that someone would create a DRM-circumventing variant, and the DRM-enforcing version would quickly become irrelevant.

    2. Re:Then OpenOffice.org should implement it FIRST by ErrorBase · · Score: 2, Interesting

      You should realize the document as a whole should be encripted, not only the flags.
      Using Kerebos (or somethine similar) as the basis for the server, and PGP to implement encription. All Open source stuff needed is already available. When integrated there are all known working parts and the internal structure can stay the same.

      I'll try to make this point to the Open Office community. I hope you'll find an 'encription' incubator in the near future...

    3. Re:Then OpenOffice.org should implement it FIRST by ahfoo · · Score: 2, Interesting

      I was just going over this in a story yesterday on multimedia. Running Macromedia multimedia packages under Wine leads to a similar effect. If the author puts in some sort of crude DRM that would prematurely exit under Windows or Mac, Wine just pops up a dialogue and says, the application is attempting to exit, would you like to ignore this?
      I was rolling on the floor the first time I saw this. So much for wannabee DRM strategies in Macromedia presentations.

    4. Re:Then OpenOffice.org should implement it FIRST by pmz · · Score: 2, Interesting

      If OpenOffice.org supported DRM like this, one would simply hack the program to to disregard such restrictions.

      Yet another indication that DRM is a bad idea. If proper implementation of DRM requires closed-source, then one has to wonder if it also requires revoking the First Amendment, too.

  102. Re:OT what does Esquire mean? by hagardtroll · · Score: 4, Funny

    Esquire generally just means "Gentleman." That is, I am a gentleman. Versus being a crass slob or something. Attorneys use it because they have such a bad reputation in this world, adding Esq to their name tries to cover that up. Just like when a news channel says "Fair & Balanced." you know that they are trying to cover something up.

  103. Re:Office 2003 DRM: It's Very Cool and Not Insidio by Ogerman · · Score: 4, Insightful

    The DRM feature in Office and Outlook enables a user to prevent emails and documents from being forwarded to and viewed by people not specified by the sender/creator. That's all this feature is.

    100% Wrong. You clearly do not understand how proprietary DRM systems work. All 'security' whatsoever hinges upon the assumption that the client's application will play by the rules. Once you have the sent document and the decryption key(s) on your computer, all faith is in the application software. The moment that someone releases a hack for the new Office and Outlook that allows a user to access the plaintext or override the "do not copy / re-send / print" flag, all supposed DRM security will be entirely worthless. It is truly this simple: If you can read it, you can copy it. The DRM being proposed here is security through obscurity. Microsoft is betting that people won't find the proverbial "key hidden under the doormat." Even if this DRM system was eventually backed up by hardware (which doesn't look very likely at this point), people could still take a picture of the screen and use OCR to recover the text.. that is until the hardware itself is cracked.

    Furthermore, I would like to point out that not all of your e-mail recipients use or want to use Outlook. Anyone who doesn't won't be able to read your emails, so enabling DRM isn't really a viable option anyhow.

    I want to control who has access without having to expose the recipient to the mystery and overhead of encryption.

    What you're asking for is an impossible pipe dream. For the reasons explained above, you will never be able to have true control over what someone does with information you send them. Using encryption, you can protect that information up to the point where they receive it, but you cannot reliably keep them from sending it to someone else. The best you can ever hope to do is build trust among the people you communicate with.

    By the way, you cannot avoid the "overhead" of encryption. It's the foundation of any DRM system. The only difference is that the new Outlook / Office / etc. will try to make it mostly invisible to the user. You'll still need keyrings, signing, and passphrases if that encryption is to be of any value whatsoever.

    So, in summary:
    1.) proprietary DRM systems are not very cool
    2.) proprietary DRM systems are, in fact, insidious. They do not offer true security but they DO try to force people to all use the same email, office, whatever software.

  104. Maybe Not.... by lynx_user_abroad · · Score: 2, Interesting
    ...it will also shut out competing software, such as OpenOffice. Now think about this for a second. Even if the developers of a competing office suite could figure out how to get their software to open an Office 2003 document, doing so would be a DMCA violation, since they'd be bypassing an anti-circumvention device.

    This argument has been made before, by myself and others, but now I'm not so sure. My doubts are primarily due to one of the answers the DOJ lawyers gave (see the answer to Question 3) during one of those "Ask Slashdot" articles. Meet the DOJ's 'Anti-Piracy' Lawyers

    The DMCA protects the authors' right to decide who gets access to a protected work and provides severe penalties to anyone who offers technology to circumvent the author's rights. But the author does not get to choose which technology is used to control access, only whether access is granted. I don't think any technology could be viewed as circumventing the authors access controls if it didn't actually do so.

    An example will explain this better. Suppose I were to manufacture a DVD player which uses DeCSS (or some other non-CSS licensed technology) to play CSS-protected DVD's, but substitutes some other access control mechanism for CSS? In other words, if you put your copy of The Matrix into my player, it demands that you insert a smart card (specific to The Matrix) before the CSS-encrypted DVD will play. And I will only manufacture a smartcard for a given movie once authorized to manufacture it by the copyright holder for that particular movie.

    If the Wachowski brothers (Warner Studios) want people to be able to watch The Matrix on my player, they sell me the right to manufacture the smartcards, and I cut them a royalty check for each card I sell. If New Line Home Entertainment doesn't want to participate, I won't manufacture a smartcard which corresponds to The Lord of the Rings - The Fellowship of the Ring and you get no farther putting that DVD into my player than you would putting it into a CD player.

    Provided I built it correctly, my DVD player could not be considered a circumvention device, because it refuses to play CSS-encrypted DVD....unless access has been granted by the copyright holder. I could sell my device even if DVDCCA chose to raise the CSS licensing price to an exhorbitant price, or refused to sell new licenses at all. A publisher who wanted a new marketing route not controlled by the DVDCCA could contract with me to have smart cards sold for the works they specify, those who didn't want to participate would be under no obligation to authorize their works through my player.

    Perhaps best yet, I can manufacture smartcards for works which are no longer protected by copyright without incurring liability under DMCA (circumventing non existant access control rights is okay). Additionally, I could manufacture smartcards for classes of people (law enforcement, teachers, librarians) which the courts decide are allowed to access such material (under Fair Use or other constructs) in spite of the authors' copy rights.

    Apply the same reasoning to Office 2003 and Open Office. I can create a version of Open Office which can read Office 2003 documents, provided I respect the authors' (not Microsoft's) wishes in controlling access. If you are the copyright holder for your own Office 2003 documents, you can authorize yourself to read your own (but not other people's) documents. I just have to figure out how to read the proprietary format, and how to ensure that my software only grants access to documents which the author is authorizing.

    --

    The thing about things we don't know is we often don't know we don't know them.

  105. MS DRM like Anti-Lock Breaking by t_allardyce · · Score: 3, Insightful

    "If you're a senior executive and you're carrying around your five-year business plan, you probably want to have that information secured so only you can read it," he said.

    If you're carrying around very sensitive data the only methods you should be relying on are tried and tested encryption, and physically restricting access

    Businesses can lock down such documents now with third-party tools such as encryption software, but embedded rights management tools in the document creation software are much easier and more likely to be used, Gartenberg said.

    "The harder you make security to use for the end user, the less people are going to use it," he said.

    The safer you make people feel, the more risks they will take - someone said that about anti-lock breaking systems

    --
    This comment does not represent the views or opinions of the user.
  106. DMCA allows reverse enggineering by HermanAB · · Score: 2, Informative

    Being one of the few people in North America that actually read the DMCA ;-) I can say that it explicitly allows reverse engineering for compatibility reasons.

    --
    Oh well, what the hell...
  107. It's not *that* bad by GarfBond · · Score: 4, Informative
    Let me preface by stating that I participated in the Office 2003 beta, so I can give a small description on how this feature works (no tomatoes please).

    This feature can be activated by selecting "Document Permissions" from either the toolbar or the File menu. Documents are NOT created with this feature enabled by default, although there might be some random little option somewhere to make it the default option.

    In Word, this feature enables you to specify which people can read it, and it automagically turns off Print Screen and Printing if I remember correctly, and maybe the clipboard too. In Outlook this prevents you from forwarding or copying the text to clipboard too.

    As for home users being able to use it, for the purposes of the beta Microsoft allowed users to use their .net passport as the method of authenticating users, in addition to whatever 2k3 server they might have had. I'm not sure if they're going to allow .net passports after the Office 2003 launch, but only time will tell. Office 2003 users will have to download some additional program (will probably also be on the CD too) to gain access to restricted documents.

    For what it's worth, here's what the microsoft help document has to say on the issue:

    NoteYou can create content with restricted permission using Information Rights Management only in Microsoft Office Professional Edition2003, Microsoft Office Word2003, Microsoft Office Excel2003, and Microsoft Office PowerPoint2003.

    Today, sensitive information can only be controlled by limiting access to the networks or computers where the information is stored. Once access is given to users, however, there are no restrictions on what can be done with the content or to whom it can be sent. This distribution of content easily allows sensitive information to reach people who were never intended to receive it. Microsoft Office2003 offers a new feature, Information Rights Management (IRM), which helps you prevent sensitive information from getting into the hands of the wrong people, whether by accident or carelessness. IRM essentially helps you control your files even after they have left your desktop!

    Creating content with restricted permission

    IRM allows an individual author to create a document, workbook, or presentation with restricted permission for specific people who will access the content. Authors use the Permission dialog box (File | Permission | Do Not Distribute or Permission on the Standard toolbar) to give users Read and Change access, as well as to set expiration dates for content. For example, Bob can give Sally permission to read a document but not make changes to it. Bob can then give John permission to make changes to the document, as well as allow him to save the document. Bob may also decide to limit both Sally and John's access to this document for 5 days. Authors can remove restricted permission from a document, workbook, or presentation by simply clicking Unrestricted Access on the Permission submenu or by clicking Permission again on the Standard toolbar.

    Additionally, administrators for companies can create permission policies that are available in Microsoft Office Word2003, Microsoft Office Excel2003, and Microsoft Office PowerPoint2003, on the Permission submenu and define who can access information and what level of editing or Office capabilities users have for a document, workbook, or presentation. For example, a company administrator might define a policy called "Company Confidential," which specifies that documents, workbooks, or presentations using that policy can be opened by users inside the company domain only. Up to 20 customized policies can be displayed (in alphabetical order) on the Permission submenu at one time so that individual authors can use them for the content they create.

    In Word, Excel, and PowerPoint, authors can re

  108. Lock-in? FUN! by tarsi210 · · Score: 2, Funny

    Man, I remember some of the lock-ins I used to participate in...youth group, high school, clubs, etc....they were always a time for extreme mayhem performed by sleep-deprived youth high on every type of sugar imaginable. You always went with a sense that if you didn't outright get laid, you'd at least be able to cop a feel during the 3:30am game of Twister.

    A Microsoft office lock-in sounds kinda ok, but I'll bet Windows engineers aren't nearly as flexible as Linux engineers.

  109. I really think this will back-fire by kannibul · · Score: 2, Insightful

    You know, when I come across a document that I can't open, I ask the creator to send me one that is compatible with what I am using.

    For example, we use MS Office 2000 at work - if someone emails me or a user a Microsoft Works file (.wks I think) - I ask them to contact the sender and have them save it in MS Word compatible format.

    Basically, as I see it, Microsoft is going to pursuade more people to NOT upgrade to the latest verion since it would be incompatible with the previous versions of Office - plus, you don't have the option to save it in a "compatible format".

    At least, this is how I am reading it.

    All I know is, if MS is making this an issue, then what I would recommend is to NOT upgrade, but to purchase something like 10 licenses for it, and have some people act as the go-between in the instance that there is an issue.

    That, or just skip it entirely, and stick with what we have. There's always RTF/TXT format, or HTML.

  110. Re:The straw that broke the PHB's back? by lessgravity · · Score: 2, Insightful

    I've been using OpenOffice on my home machine now for about 4 months and I love it. I am starting the push (since I'm an IT Manager) for our company to look at it as an alternative to upgrading Office. It will be difficult to convince those in management away from their precious Excel. centrifugalforce

  111. MS master stroke by ciphertext · · Score: 2, Insightful

    If you had a monopoly on desktop productivity and wanted to draw people to use your server software, what better way to do that than offer them a carrot! I don't know if this will prevent the copying of documents (you could open Open Office 1.1 and the the Office suite side by side and CTRL-C and CTRL-V until you got all of what you wanted) if you have sufficient authority to read them. What it does do is cause the IT departments of large companies with an interest in DRM to think twice about the Windows Server 2003. If they use the new Office and want to use the DRM they MUST use windows server 2003. You can't use Red Hat, NetBSD, FreeBSD, OpenBSD, SuSe, Solaris, (insert OS here...). I see this as another attempt by MS to exercise their muscle to gather up monopoly share. We need a few corporations the size of IBM, HP, GM, GE, etc... to stand up and say "No thanks. We are just fine with what we have now.". Even better would be if those companies said "No thanks. We believe we are going to switch over to a Linux desktop with OpenOffice or StarOffice, because what it will save us in licensing will cover the cost to redeploy and retrain. Also, we won't be locked in to one vendor for our products.". Too bad that won't happen.

    --
    To know is to have knowledge....to understand is to be enlightened.
  112. Yet more alarmist FUD by earache · · Score: 5, Informative

    You guys even bother reading the article at all?

    The technology is designed to enable secure document transfer between trusted parties. For instance, documents containing trade secrets or engineering specs for a company's latest greatest apps. The creator of the document can secure it so only specified people can read it, limiting potential leaks outside of the company, or the document falling into the wrong hands.

    It is not enabled by default and it requires an internal infrastructure to implement (Windows Server 2003 with Windows Rights Management) so the average joe blow isn't going to even be able to use it.

    As for "competing products" not being able to read these secured documents, well that's the whole point right? If you're publishing secure documents, you're securing them for a reason, and you're only going to want those who can read it to read it.

    There could be an argument for Microsoft to publish an open standard for interoperation, but this is America, not a socialist state, so that argument is a little weak.

    Personally, I think this is a cool feature, and one I'm personally going to be using for my day to day work.

    1. Re:Yet more alarmist FUD by multi+io · · Score: 4, Informative
      As for "competing products" not being able to read these secured documents, well that's the whole point right?

      Um, no it is not. The point that unauthorized users shouldn't be able to read the documents. Competing products should be able to read them, provided they know the required keys and can access the DRM server. This requires that MS documents the encryption format. Just as GnuPG etc do.

  113. Microsoft Needs DRM for... by KaosConMan · · Score: 3, Funny

    Their real reason for DRM in Office...

    To stop the Halloween Documents from leaking year after year!

  114. This caught me on a slow day, so here it goes... by Dave21212 · · Score: 4, Insightful
    this caught me on a slow day, so here it goes... your comments or criticisms are appreciated !

    Think about:

    The system is ultimately ineffective (screen shots anyone?, hand made copies?, pocket cell-phone cameras?), and false security is worse than none

    It requires additional infrastructure (cost) and software upgrades (cost) then locks you in to the M$ implementation

    Companies (financial) will have to manage (cost) the new documents to meet compliance issues (ie: you can NOT have documents that are required to be kept for compliance be protected from copying or have them expire - and how do you stop it?)

    Single point of failure:What if the DRM server is down (temporary downtime company-wide for M$ Office)

    What if the DRM server crashes and can't be restored (permanent loss of important data)

    Will M$ provide a backdoor (for Law Enforcement, PATRIOT ACT, etc), what if it's leaked ?

    THIS IS A DOCUMENT MANAGEMENT ISSUE - not a security problem, people need EDM/ECM not more gimmicks !

    'Hacking' into the document to provide interoperability or to recover data may be a FEDERAL OFFENSE under DMCA

    What about search/rescue for the users who screw up and lock themselves or others out of documents accidentally ???

    Forced upgrades (al la Win2K) just to continue to use YOUR OWN (DRMed) corporate assets

    Louts Notes has had a (less user-friendly) version of this since R2, and very few shops use it (encryption keys)

    On the bright side:

    There are a huge number of users/customers/vendors/partners who will not be able to use the DRM documents (requires upgrade), so it will take years to even marginally implement for external communications (which is one of the main items people want it for in the first place)

    Some obvious possibilities for abuse include:

    Stopping Whistleblowers (Enron, Pentagon, Worldcom/Arthur Anderson, Whitewater)

    Erasing potential evidence: stockbroker send you bad advice in a doc that expires in 30 days

    Erasing potential evidence: boss tells you to do something unusual that gets you into trouble

    Erasing potential evidence: employees colluding to do things detrimental to a company (embezzle?)

    Mafia can us it for betting slips, other low-level secure comms

    Word/Excel macro viruses could be set to self-destruct to protect the guilty

    Restricting fair-use rights

    The Terrorists could use it !

    See Also:
    http://www.securityfocus.com/columnists/165

    --
    "Whoever would overthrow the liberty of a nation must begin by subduing the freeness of speech."--Benjamin Franklin
  115. Re:The straw that broke the PHB's back? by 16K+Ram+Pack · · Score: 2
    Don't forget export to PDFs.

    That's one thing that Office can't do.

    Personally, I like the fact that it's all XML. As a programmer, I could write documents from a program, if I wanted to, and without having any open office software installed.

  116. DMCA woes: wrong! by Tom7 · · Score: 2, Insightful

    Even if the developers of a competing office suite could figure out how to get their software to open an Office 2003 document, doing so would be a DMCA violation, since they'd be bypassing an anti-circumvention device.

    No, wrong. Circumvention only happens if it is done without the authority of the copyright holder. Since an office file opener could be used to open your own documents, or documents that others want you to open, there exists a substantial non-infringing use, so the software would not be a circumvention device.

    1. Re:DMCA woes: wrong! by Frobnicator · · Score: 2, Insightful
      Wrong! ... Since an office file opener could be used to open your own documents, or documents that others want you to open, there exists a substantial non-infringing use, so the software would not be a circumvention device.

      Yes, he is partly wrong, but so are you. It may be true that the circumvention device clauses are satisfied. Unfortunately, we don't have to look far to see how companies and projects that fit that exception are still prosecuted/persecuted and even killed.

      This would be a good target for a bunch of SLAPP suits against the developers -- if they chose to implement it. The potential gain for Microsoft and others ("We bankrupted 30 contributers to OpenOffice for DMCA violations. We're sending you a DMCA notice. You wanna be bankrupt next?") far outweighs their potential cost ("We paid $250,000,000 in the cases we lost, but it's just an investment for product lock-in and extra FUD against developers.") .

      Just being on the right side of the law does not mean that you will survive a massive legal attack from a multi-billion dollar company. Anti-SLAPP laws are in effect in most states but the DMCA altered the USC, which is the federal law, so those state laws could be carefully avoided.

      Examples:

      • DeCSS (multiple cases, some still in appeal)
      • kazaa (in court and dying)
      • napster (dead)
      • CopyWrite (alive, after expensive years in court and an expensive appeal)
      • Lessig about Fox fair use problems, MyMP3, Napster (in court & private settlements, dead, dead)
      • DRM Conference transcrpt (discusses dead & dying, but legal, projects)
      • Embedded fonts (alive, but at a big cost and avoidance of court)
      • A student's paper with summaries of other cases (United States v. Sklyarov, Lexmark v. Static Control Components , Felton v. Recording Industry Ass'n of America) and several interesting hypothetical physical-world comparisons to the law (locking keys out of your car == loss of ownership of car until you present the Automobile Protection Assocaition with a proper court orders allowing you to jimmy the lock).

      The unfortunate fact is that just because it is legal, and even if it is right, both StarOffice (Sun) and the contributors to OpenOffice (including Sun) could both face deadly lawsuits from Microsoft if they attempt compatability.

      Strategic lawsuits (gray-area, predatory lawsuits), "death by lawsuit", and even Google's lists of Allegedly Unethical Firms, Corporate Accountability, and corporate criminals show how corporations are attacking and killing projects, even when the projects or public participation are the right and legal thing.

      So while you are right that such a project would be legal, you are wrong in your implied statement that it would be a safe thing to do.

      frob

      --
      //TODO: Think of witty sig statement
  117. 5 Questions Customers Should Ask Microsoft by Glasswire · · Score: 4, Insightful

    1) Will DRM or other features in the new Office break backward compatibility with earlier Word/Excel/etc formats? In other words, will opening and editing and saving a Word 97 file in the new Word prevent older Word versions (or 3rd party applications) to open that file later?

    2) Will Microsoft make any encoding APIs freely available to the public for 3rd party applications to open and use those files?

    3) If the answer to 2) is no, will Microsoft license any encoding APIs to 3rd parties and will these be non-discriminatory?

    4) If the answer to both 2) and 3) is no, will Microsoft agree not to invoke legal action in the event that 3rd parties reverse engineer any encoding APIs?

    5) If the answers to all of 1) through 4) is no, is Microsoft not concerned about US or EU anti-trust authorities ruling that the Office file strategy is anti-competitive?

  118. Businesses won't stand for this by budGibson · · Score: 2, Insightful

    Business people are well aware of the dangers of lock-in and looking for alternatives. Witness the recent adoptions of linux for the desktop (government of Munich), the moves by Asian governments (Japan, Korea, China) to create a non-proprietary OS, the moves of industry groups to adopt open standards (CELF in Japan, the embedded market in general).

    The tendency here is to view Microsoft as all-powerful. However, as revealed by the recent Fortune opinion piece summarized here, Microsoft cannot come up with new products that genuinely win people over. Business people have revolted over the forced upgrade terms they put through a year ago. People are walking away from their forced lock-in at all levels. If anything, this move will just speed up the process.

  119. There are Ways to Resist by serutan · · Score: 2, Insightful

    Whenever someone sends you a Word 2003 document you can't read, do what you do when someone sends you any other type of document you can't read. Reply that you can't read it and ask them to send you a non-protected format that you Can read, such as RTF.

  120. Maybe not a DCMA issue.... by johnlcallaway · · Score: 2, Interesting


    For the sake of argument, assume that it is true that the DCMA legally prevents me from breaking an encryption that a movie production company has placed on it's DVD to prevent me from copying it, ignoring for the moment the side discussion that copyright laws says I can make copies for my own use. A legal argument can be put forth in court because there are two parties involved in this contract and encryption scheme... MGM and me. It doesn't make any difference what the encryption method is, MGM has used it specifically so anyone who has access to the media can't copy it, because they own the rights to the content and they say so. (OK .. big holes in the above, but work with me here...)

    Why would that law prevent me from breaking the encryption on a document that I have created? I do it all the time in order to read it, so what is the problem if I want to do it in order to use it from another program?

    Where is it said that I cannot provide a product that enables a user to decrypt documents that they already own,that they have created, or given someone else the right to read? It's not breaking an encryption if it's your own document, is it?? If I can reverse engineer the method M$ is using to extract the key and decrypt it, and use all the authentication M$ is using, why would that not be legal??

    It appears to me that it would only be illegal to provide a method to break the encryption of a document that someone does not have a right to.

    Just wondering.....

    --
    I rarely read replies, it's my opinion and if you thought about your opinion a little more, I'm OK with that.
  121. PDF unencrypting solution by interiot · · Score: 4, Informative
    You'll still have some problems with ghostscript since the Adobe PDF somehow adds some rogue postscript in your printer output that makes the ps2pdf crap out. Ghostscript somehow has a "feature" that supports Adobe's lameness, implemented in its pdf_sec.ps file. You just have to override it with a hacked version like this and you should be good.

    Googling for pdf_sec.ps along with "Adobe" or whatnot should give you more info.

  122. And in recent news... by ReNeGaDe75 · · Score: 3, Funny

    General Electric has announced that they will begin producing bread. This bread will have special ingrediants so that it only works in GE toasters.

    If you use non-GE bread, your toast will come out over-cooked, so it is highly recommended that you buy the new bread from GE, which costs $30 a loaf.

    If you attempt to mix a slice of their bread with a slice of Wonder bread (such as you only have 1 slice of GE bread left), you will be in violation of the Gormet Millenium Copyright Act of 2010, and could be fined up to $30,000.

    General Electic will also be shipping all new toasters with titanium alloys. This innovative feature ensures safety by preventing people from trying to open their toaster when it stops working. To improve user friendliness, the toasters will lock onto the power cords and secure them, so users will be unable to accidently unplug their toasters and become confused about why it isn't toasting.

    --
    Hypocrisy is the 8th deadly sin.
  123. What crap... by NekoXP · · Score: 2

    There is nothing in Office 2003 which FORCES DRM signing on documents.

    There is nothing in Office 2003 & Windows Server 2003 that is particularly malicious (unless you think signing all your documents with DES or your PGP key or so is malicious)

    There is nothing to stop OpenOffice from reading ANY unencrypted documents, apart from just not interpreting features right (which means it will open Word docs just as well or badly as it did always..)

    This is another one of those whines a lot of Geeks have that they think that somehow their rights are being infringed just because someone has the ability to stop them reading a document - or at least encourage them not to.

    The same way they whine that "cctv cameras infringe on my civil liberties!" when what they really mean is "cctv cameras mean I can't get away with mugging old ladies!" and the classic "public non-smoking laws discriminate against smokers!" when really they mean "It's my God-given American right to cause lung cancer in my fellow human beings!"

    Give it up. Most businesses would literally give the right wing of their office block to be able to stop people from reading other peoples' performance reviews, or to stop their secret info leaking into the hands of competitors, or negotiation meeting minutes being published on Slashdot.

    .. since it's bound to be integrated into the Active Directory, too, (why else would you need 2K3 server?) which means when people quit your company and you delete their account, they lose all access to those documents too. Sounds like a great idea.

    "wah wah Microsoft are stopping me from building my retirement fund by selling company secrets to someone else!!!"

    There are nefarious purposes you could use it for though.. like, making sure your equivalent to the "Halloween Document" is unreadable, or auto-destruct capability for those spreadsheets that show much it'll cost to drive a rival browser company into the ground. But that stuff happens even without DRM, and they manage to prove it happens and win in court by other means than bringing up petty emails and Word documents.

    If OpenOffice had gotten this first, nobody would be complaining.

    And of course.. what's the betting that OpenOffice can actually use a standard Windows DRM/IRM API at some point to unencrypt documents based on their Windows 2003 Server authentication and signature key?

    Developing a License Provider Service for Windows Media Encoder

    Getting Started with Windows Media Rights Manager SDK

    Looks relatively public to me. No less public than the new PKZIP encryption extensions :)

    Hell, why doesn't someone talk to Microsoft and ask if they can use the API for interoperability purposes? It's not breaking the DMCA if they let you :)

  124. Re:The straw that broke the PHB's back? by William+Baric · · Score: 2, Insightful

    We allready use OpenOffice for all our end user's here

    How did you make the switch? I did some tests with OpenOffice and some of my clients who don't want to spend money on licences... It's hell! Not because OpenOffice is bad (I don't use MS Office anymore) but because most people are completely computer illiterate. As soon as the smallest thing changes they're lost! Half of them think that File/Print/Select PDF printer is too complicated so they keep sending SXW files to people who use MS Word. The worst part is since they try to find a excuse for their incompetence they're constantly bitching OpenOffice (and me, of course). If OOo had a perfect MS Word filter I guess change in a large (i.e. more than 2 people) organization could be possible but until then it's a lot of trouble and in a short term period paying for an MS upgrade cost a lot less than switching to OOo (particularly because people would use the "I'm learning the new program" excuse to not do their work).

  125. Re:The straw that broke the PHB's back? by override11 · · Score: 2, Funny

    On some of the users, I just replaced the OOo icons with their old MS Word and MW Excel icons, and told them they got a new 'updated' version. Most didnt even notice, and if you go into Options and under load/save, choose 'always save as MS Word 97/2000', they will never even know the difference. Never say free tho, or they will think they are getting gyped. :)

    --
    No I didnt spell check this post...
  126. The submitter didn't RTFA by EmagGeek · · Score: 5, Informative

    Probably redundant... but here goes...

    According to the article, it is not the default behavior for O2K3 to use Information Rights Management. In fact, in order for Office to lock a document, there has to be a Win2K3 Server running the rights manager suite somewhere on the LAN...

    Nothing to see here... move along...

  127. ROT13 by AlgUSF · · Score: 2, Funny

    They will probably call ROT13 an encryption algorithm and sue anyone who discovers it. :-)

    --


    I want my rights back. I was actually using them when our government stole them after 9/11.
  128. DRM and encryption by David+Jao · · Score: 3, Insightful
    A private company introduces software that basically introduces built-in encryption for word documents, spreadsheets, and email.

    You have it quite wrong. DRM is not encryption. It is amazing to me that people so often confuse the two.

    Encryption is the art of securing a communication that both parties want secret. An example of encryption is the Pentagon-Kremlin hotline.

    DRM is the art of securing a communication that only the sender wants secret. The whole point of DRM is that you are trying to keep the communication from leaking even in the face of an adversarial recipient.

    The distinction is a really big deal! It's the whole reason why DRM is so difficult (and, to some, so objectionable).

    Disclosure: I work for Microsoft, in the cryptography/anti-piracy/DRM group.

  129. Three reasons the Office 2003 will flop by Eminor · · Score: 2, Interesting

    1. I highly doubt that the average creator of a a word document cares about DRM on their document.

    2. Some people may upgrade to Word 2003, but inorder to communicate with those that don't have Word 2003, they will not use DRM. Plus, DRM is not on by default. So there will be no incentive to upgrade.

    3. If I use Open Office, Word 2003 users can still read documents that I create. If T need to read a doc that is DRMed, and it is important, the author can send me a copy that is not DRMed.

    In the next few years, companies will be looking to cut costs. I don't think very many companies are going to be looking forward to paying more Liscening fees to Microsoft. Especially if users aren't asking for upgrades, as their software already does more than they need it to.

    Also, about them creating a plugin for to view DRM in EI. If that isn't a Monopolistic practice, I don't know what is. "As long as you run our Operating System and use our browser, you can view DRMed documents. If you do have the rights to view the document, but don't use our software, screw you".

    I really don't see any problem with Open Office providing the same DRM functionallity as Word, as long as they are only letting those viewers whom are supposed to see the document see it. Keep in mind that they haven't DRMed the DRM algorithm.

  130. Interesting Idea by Eythian · · Score: 2, Informative

    None of this seems to me to be anything bad, it is just a way of controlling who has ready access to documents. While reading the comments, I thought about how it could be implemented as an open source system. If I get free time I may look into prototyping it. Here's what I've come up with so far:

    You will need three components generally:

    1. A server-side daemon

      This tracks what documents are registered against it, who should be allowed to use it and when and so on. It stores the private keys of the documents, and also public keys of all the potential users. When a user requests a document, it issues a challenge, which they encrypt with their public key, and send back. This is how it knows the user is valid (unless their key has been stolen). It then sends the key that allows the document to be decrypted, assuming all the rights are OK.

    2. A client-side daemon

      This is less important, and could probably be removed entierly, but will do caching and allow things like offline access. It acts as an intermediate between the local application and the main server. It will cache the keys and so on, for the time period that they are allowed. It may also store user credentials for a while, so that passwords don't have to be reentered. Ideally, the user password will decrypt the key used for authentication against the main server.

    3. A client-side application

      This is the application, OpenOffice, or whatever. When it wants to open a locked document, it goes through the process of asking the client-side daemon for a key. The daemon either replies with the key, or queries the user for a password and then returns the key. This may involve asking the server for the key if it has never been queried before.

    This is just off the top of my head, and there are a lot of details missing. What it won't protect against is someone who legitimatly has access to the document running off with it, but it would make it very difficult for anyone to see it who wasn't supposed to have access to it. If desired, you could also have flags for 'no printing', etc, but they would have to be respected by the application so couldn't be relied upon.

    One other thing that may be of interest from this is that there sometimes may be no need to distribute an entire document, just a token, and if the person tries to access the token, the latest version of the document is fetched from the server. This could be another way of dealing with dynamic documents.

    I might look into this further some time. If you are interested, email me, and I'll find a place to document stuff.

  131. Anarchy in the UK, US, EU, ... by TomDLux · · Score: 2, Insightful

    If a nation publishes a law in a format which I cannot legally read except by purchasing a specific product, and I refuse to make that purchase, how can I be expected to obey the law?

  132. DRM won't affect secrecy, just hassle by SgtChaireBourne · · Score: 2, Interesting

    DRM won't affect secrecy, though it is likely to amount in lost productivity among legitimate users trying to open documents. This is for two reasons. First, Microsoft can do what they want with your data and they have the keys. Second, they have such a bad track record for security that it will pretty much be only legitimate users who will be affected.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  133. A strategy for OpenOffice/OpenSource... by caitsith01 · · Score: 2, Interesting

    This could actually be a big opportunity for open source to seize the initiative.

    I have seen various programs that act as add-ons to MS-Office, e.g. footnoting software that gives Word the ability to have a decent referencing system for use in proper academic and legal documents (called EndNote or something). Is there any reason why we couldn't write an open source DRM standard and then implement an Office plugin to provide functionality for MS users? I can think of a few benefits:

    - there is an incentive for people to use a system that is transparent and therefore free from MS shenanigans

    - there is a very big incentive for business to use a standard that all of their partners/suppliers/employers/customers can also use irrespective of their OS and software configuration

    - people love the word 'free'

    - an open source standard could easily be implemented to run on practically any system, whereas MS's system will no doubt require very specific MS networking/security protocols to be installed and configured (ever tried to use .Net with a remote database?)

    - and most of all, open source cannot win battles it is not in. We must comprehend that we are not talking about the 'DRM v no DRM' battle any more, we are talking about the 'MS Secret DRM v Open DRM' battle. We can't win that if we don't have a contender, and by contender I mean a contender that people running Windows with Office can use. People who think we can just say, this whole thing sucks, we don't want DRM at all, are dreaming if they think that will stop it from happening. What we need is to seize the initiative and create a version of DRM that is the best option for business and individuals. Furthermore, we can't stick with Linux and hope that enough people switch to let us win - there must be a focus on fighting MS with open source on its own turf, the Windows family of OSs.

    Now we just need someone to actually do it...

    --
    Read Pynchon.
  134. Enough will be enough ... thanks! ;-( by ltmdweaver · · Score: 2, Interesting

    I read a book about a runaway jury who refused to convict or some such thing based on the jury's feeling/belief that a law (DMCA in this case) did not apply or was unjust... Naah never happen in this country.

    In the US property rights (DMCA=IP Rights) are sacrosanct and where normal individuals don't own even the right to read/view purchased or licensed 'content' in the living room, bathroom, bedroom, workplace with the device of their choice.

    At some point I would hope folks (including corporations) will get fed up with being told what is good for them, how much it will cost and just paying the bill.... again and again...

    But again I suppose that idea is more than a little utopian. We've been following MS (and by tactics RIAA, MPAA, and others) around like sheeple for 20+ years now. MS Office with DRM sounds more than a little like the judas goat bell ringing. Dinner bell for the rich kid in Redmond I suppose. All to feed the mavens of tech stocks with no long term intrinsic value. MS has yet to deliver ANYTHING innovative or of lasting value. Sheeple will continue to buy this trash though. ;-(

    I'm voting with my feet... straight to the likes of staroffice, openoffice, thinkfree, etc. If my company goes, they will get my communique's in simple text, or RTF.

    mdw ;-)