Full Disclosure mailing list archives

Re: OT: Tool for sanitizing MS office documents?


From: Ron DuFresne <dufresne () winternet com>
Date: Mon, 31 Jan 2005 11:45:55 -0600 (CST)

On Mon, 31 Jan 2005, Florian Weimer wrote:

* Clement Dupuis:

This is why so many companies have adopted the PDF format for document
exchange.  What you see is what it is, no hidden code or revision bits.

This view is a bit too simplistic.  PDF files can contain layers, and
the text that is nicely covered by those black rectangle may still be
present in the document.

In general, PDF documents are not too bad an idea, though.  At least
it avoids the embarrassment of embedded OLE objects which contain far
more information that is actually visible in the parent document (and
I don't think Microsoft's tool addresses this because it would
castrate the document).


I recall the tool being requested, I thought it was a tool developed by
micheal <sp?> zewlski <sp?>.

Thanks,

Ron DuFresne
-- 
"Sometimes you get the blues because your baby leaves you. Sometimes you get'em
'cause she comes back." --B.B. King
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: