Slashdot Mirror


Few of OOXML's Flaws Have Been Addressed

I Don't Believe in Imaginary Property writes "IBM's Rob Weir has done a study on how many flaws were addressed by the OOXML Ballot Resolution Meeting. So far, using a random sampling technique, he has yet to find a flaw that was addressed, making the upper bound a paltry 1.5%. Even so, he's found a number of new flaws, including a security vulnerability: OOXML stores passwords in database connection strings in plain text. At least there were no mistakes on five of the first twenty five random pages he reviewed."

1 of 162 comments (clear)

  1. Re:huh? by Shados · · Score: 4, Informative

    Because people actually do work with Office Suites, and they are an integral part of the workflow and ecosystem of significant companies IT.

    For example, a spreadsheet is often the favored client for an OLAP system, and complex spreadsheets will get reused a lot, so connection strings may be part of the overall "application" that the document has become.

    People like me and (probably) you tend to use documents as just that: documents. But in the big boy's world, they're far more important than that.