News for hackers. Stuff that matters.
Re:Macro-Less Code Exec in MSWord by ksk on Wednesday October 11, 2017 @02:10AM (#15447620)
If you download such a file, the default setting of the protected mode should cover this.

https://i.imgur.com/49x2IZN.png

Re:Macro-Less Code Exec in MSWord by The6P4C on Wednesday October 11, 2017 @03:21AM (#15447862)
Who doesn't immediately click out of protected view though?
Re:Macro-Less Code Exec in MSWord by ksk on Wednesday October 11, 2017 @11:51AM (#15450703)
Yeah, I wonder if we need two paradigms here. Clicking things should only be for non-executable read-only stuff. And we need another UI verb for when we want to execute code, read/write, etc. Hard to get people onboard though, when they're just used to doing it one way.
Re:Macro-Less Code Exec in MSWord by sleepychu on Wednesday October 11, 2017 @04:21AM (#15448130)
Why would you? (If you're just reading it)
Re:Macro-Less Code Exec in MSWord by technion on Wednesday October 11, 2017 @05:52AM (#15448492)
The primary issue for me is that in protected mode, you can't copy to clipboard. So I can't take a note and send it to someone, I can't paste something into a ticket system, etc etc. I have to admit I'm pretty used to just clicking out of protected mode.
Re:Macro-Less Code Exec in MSWord by Walf on Wednesday October 11, 2017 @09:12AM (#15449423)
Word exits protected mode just to print. Apparently you can create screen pixels from that mode, but not if they're going to end up in a PDF or on paper.