News for hackers. Stuff that matters.
Re:Call Python functions from VBA in all Microsoft Office apps by AdmiralAsshat on Monday October 08, 2018 @09:44AM (#18167331)
It's getting to the point where simply opening a Microsoft Office document is roughly the same as opening a random .exe file.

I think we should treat them with the same kind of paranoia.

Re:Call Python functions from VBA in all Microsoft Office apps by auxym on Monday October 08, 2018 @10:16AM (#18167618)
> t's getting to the point where simply opening a Microsoft Office document is roughly the same as opening a random .exe file.

This isn't exactly new. In fact it was much worse the late 90s / early 00s, the heyday of windows viruses. There was absolutely no security, opening an excel document automatically meant running arbitrary code that had full system access (via COM, etc). Many viruses spread over email by word and excel documents.

At least now, macros execution is disabled by default. Unless you explicitly enable automatic macro execution on all documents, I wouldn't be too worried about opening a documents. Of course, there's the occasional vuln (http://georgemauer.net/2017/10/07/csv-injection.html) but excel isn't exactly the only software with occasional findings of execution vulnerabilities.

Re:Call Python functions from VBA in all Microsoft Office apps by pletnes on Monday October 08, 2018 @11:47AM (#18168498)
Printing requires enabling macros. Most people knee-jerk-click «enable editing» anyway.