Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Art Clemons
What's the security issue with using a document file format based on XML? http://soa.sys-con.com/node/1061373 http://voices.washingtonpost.com/securityfix/2009/08/researchers_xml_security_flaw.html * ** List info,

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Chris Dunford
What's the security issue with using a document file format based on XML? http://soa.sys-con.com/node/1061373 http://voices.washingtonpost.com/securityfix/2009/08/researchers_xml_security_flaw.html No, there's nothing inherently insecure about XML. These flaws aren't in XML itself,

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Art Clemons
No, there's nothing inherently insecure about XML. These flaws aren't in XML itself, they're in some of the code libraries that developers use to process XML. The most important issue is that MS has to stop selling Word with XML and pay money. In effect, Word has been orphaned unless MS

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Chris Dunford
The most important issue is that MS has to stop selling Word with XML and pay money. In effect, Word has been orphaned unless MS can switch to something besides XML quickly. No, the ruling is much narrower than just You can't use XML. It has to do with support for the creation of certain

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Art Clemons
Fine, but my point is that these are not security issues with XML as you implied. They are issues with the code that parses and processes XML documents. It's not valid to say XML has security issues, because it doesn't. What's the difference between Microsoft Core Services having an

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-13 Thread Chris Dunford
What's the difference between Microsoft Core Services having an implementation of XML tools that are subject to great misuse and Security issues with XML? If you can't use XML without a risk of garnering little trojans or implementing some zero day flaw, what's the practical difference.

[CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-12 Thread Art Clemons
Guess patents are coming back to bite MS. Apparently another entity had a patent on XML. So much for XML as a generic standard. Considering how XML has been a pain in the rear of security, it might not be a major loss.

Re: [CGUYS] Texas Judge stops Microsoft Selling Word

2009-08-12 Thread Fred Holmes
What's the security issue with using a document file format based on XML? At 08:31 PM 8/12/2009, Art Clemons wrote: Guess patents are coming back to bite MS. Apparently another entity had a patent on XML. So much for XML as a generic standard. Considering how XML has been a pain in the rear of