Re: [libreoffice-users] When will LO have MS macro and function support?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/02/15 14:47, Tom Davies wrote:

> I've never heard of OpenOffice or LibreOffice macros being used as an attack vector

At least one proof-of-concept extension was released.
At least one document with an included proof-of-concept macro was released.

The upside of those proof of concept items, is that the user had to
deliberately click on something, for the payload to be delivered.


However, several years ago there was an article in a language related to
French, that implied that at least one "malware attack vector" using ODF
file formats was in the wild. (This article was several years after the
French ministry of Defence discussed security flaws in OOo, and was
referring to then-current events.)

One of the Snowdon Papers implied that OOo security flaws were being
exploited, but it gave no details about what, where, or how it was being
done.

That said, if one works in area where spear-phishing is a daily yawn,
the security model offered by OOo, and its derivatives, is harder to
breach than that offered by MSO.

jonathon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=i6m+
-----END PGP SIGNATURE-----

-- 
To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted