[mso] Re: Microsoft Word flaw may allow file theft

  • From: "Dian Chapman" <dian@xxxxxxxxxxxxx>
  • To: <mso@xxxxxxxxxxxxx>
  • Date: Sat, 14 Sep 2002 01:10:26 -0500

HA! Disagreements with techno issues in this house is not a new issue. 

Greg's responsible for hundreds of people, many too stupid to be allowed
to use a computer. I'm generally responsible for me...and I know I'm not
stupid enough to allow something like this to get by me...so I save
myself the personal aggravation from worrying about it. It's not the
first time I've shrugged off something as a non-issues that he's been
pissed about...and vice versa.

Ask Greg about databases<g>...I love databases and Greg sees them as
evil<vbg>...so it's all a matter of perspective. 

Dian Chapman
Technical Consultant, Instructor,
Microsoft MVP & TechTrax Editor

Word AutoForm/VBA eBook: http://www.mousetrax.com/books.html
Tutorial web site: http://www.mousetrax.com/techpage.html
TechTrax Ezine: http://www.mousetrax.com/techtrax/

-----Original Message-----
From: mso-bounce@xxxxxxxxxxxxx [mailto:mso-bounce@xxxxxxxxxxxxx] On
Behalf Of Linda F. Johnson
Sent: Friday, September 13, 2002 11:03 PM
To: mso@xxxxxxxxxxxxx
Subject: [mso] Re: Microsoft Word flaw may allow file theft



Hmmm...have we started a family feud among the Chapmans? LOL

One says it's a  "pretty serious hole", while the other says "This is
not so much as a security hole, as everyone is SUDDENLY talking
about"....sooo, who do we believe?...Ms Dian or "Greggie"?

Greggie?  ROFL

Linda
Publisher ~ ABC ~ All 'Bout Computers
Owner ~ Linda's Computer Stop http://personal-computer-tutor.com
FREE MS Office eBook Tutorial
http://personal-computer-tutor.com/library.htm
 


-----Original Message-----
From: mso-bounce@xxxxxxxxxxxxx [mailto:mso-bounce@xxxxxxxxxxxxx] On
Behalf Of Greg Chapman
Sent: Friday, September 13, 2002 11:52 PM
To: mso@xxxxxxxxxxxxx
Subject: [mso] Re: Microsoft Word flaw may allow file theft



Well, Woody has been reporting this publicly for a couple weeks now. It
is a pretty serious hole and the problem with it is what the black hats
will develop to take advantage of it, not the flaw itself. The thing
that ticks me most about it, though, is that I (and Dian was there to
hear it) told MS Word engineers that something like this was going to
show up and that it would allow hackers to even steal 'signed'
credentials. So when I digitally sign a Word template for distribution
and the safety tag is there that says "Greggie's signature is on this
template, do you trust him?" someone else can steal that sig and use it
to pass unsage code. Suddenly, those keyed signatures are valueless and
we're right back where we started on this Word macro virus problem.

*************************************************************
You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx
or MicrosoftOffice@xxxxxxxxxxxxxxxx

To send mail to the group, simply address it to mso@xxxxxxxxxxxxx

To Unsubscribe from this group, send an email to 
mso-request@xxxxxxxxxxxxx?Subject=unsubscribe

Or, visit the group's homepage and use the dropdown menu.  This will
also allow you to change your email settings to digest or vacation (no
mail). //www.freelists.org/webpage/mso

To be able to use the files section for sharing files with the group,
send a request to mso-moderators@xxxxxxxxxxxxx and you will be sent an
invitation with instructions.  Once you are a member of the files group,
you can go here to upload/download files:
http://www.smartgroups.com/vault/msofiles
*************************************************************

*************************************************************
You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx or 
MicrosoftOffice@xxxxxxxxxxxxxxxx

To send mail to the group, simply address it to mso@xxxxxxxxxxxxx

To Unsubscribe from this group, send an email to 
mso-request@xxxxxxxxxxxxx?Subject=unsubscribe

Or, visit the group's homepage and use the dropdown menu.  This will also allow 
you to change your email settings to digest or vacation (no mail).
//www.freelists.org/webpage/mso

To be able to use the files section for sharing files with the group, send a 
request to mso-moderators@xxxxxxxxxxxxx and you will be sent an invitation with 
instructions.  Once you are a member of the files group, you can go here to 
upload/download files:
http://www.smartgroups.com/vault/msofiles
*************************************************************

Other related posts: