Feeds

French MoD questions OpenOffice security

Quit your sniggering Microsoft

Build a business case: developing custom apps

The French Ministry of Defense has reportedly raised a red flag on OpenOffice, saying the open source desktop suite is less secure than Microsoft's product.

A classified report by the ministry into OpenOffice has apparently concluded the suite is more susceptible to attack from macros than Microsoft Office.

Details of the report are scarce, but one sticking point appears to be the fact OpenOffice - unlike Microsoft's Office - does not bombard the end-user with warnings before opening a macro. At least one vulnerability uncovered in OpenOffice - fixed in a patch released this month - saw some macros invoked even after the end-user had disabled the function.

Publication of the report comes as OpenOffice sees growing use in government circles across Europe as an alternative to Microsoft's Office. Recent converts in France include the Direction Generale des Impots - rolling out OpenOffice to 80,000 clients ripping out Office 97 - and the French gendarmerie with 104,275 personnel.

The report is unlikely to dampen enthusiasm for OpenOffice and will no-doubt be brushed aside by supporters of the suite as something the community can fix. Indeed, the MoD is expected to present its findings to OpenOffice.org.

Supporters will also, rightly, point to the shameful security record of Microsoft Office. Malware writers have gone beyond just Outlook to crack open Word, Excel and PowerPoint as a means to gain control of users' PCs.

That said, you can be sure the existence of the report will be seized upon by critics of OpenOffice and open source as proof "we told you so." Furthermore, you can expect a slow uptick in numbers of exploits. The Stardust poof of concept virus was recently written to exploit macros in Sun Microsystems's StarOffice, anchored on OpenOffice, but can be modified for OpenOffice 2.0.®

Bridging the IT gap between rising business demands and ageing tools

More from The Register

next story
NO MORE ALL CAPS and other pleasures of Visual Studio 14
Unpicking a packed preview that breaks down ASP.NET
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
Put down that Oracle database patch: It could cost $23,000 per CPU
On-by-default INMEMORY tech a boon for developers ... as long as they can afford it
Google shows off new Chrome OS look
Athena springs full-grown from Chromium project's head
Apple: We'll unleash OS X Yosemite beta on the MASSES on 24 July
Starting today, regular fanbois will be guinea pigs, it tells Reg
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
DARPA-derived secure microkernel goes open source tomorrow
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.