Excel (Office XP) secretly inserts personal metadata when closingdocuments without saving

D

Dave

Because I actually like to know and control when my documents are
modified, I maintain digital checksums of all my documents (as anyone
should to detect corruption or unauthorized tampering).

Yesterday I was sent a binomial distribution table in an Excel document.
I opened the document and then closed it without making any changes.
The file's last-modified timestamp was unchanged. However, I detected
modification of the file by a change in its SHA1 signature. A binary
comparison between the original document revealed some minor
differences, such as the original author's name being partially
overwritten with my name in the document's hidden metadata.

This was very discouraging, and despite going through every single
option in Excel's options, I was unable to stop this behavior. I
personally find this kind of software behavior appalling. It isn't the
particular change in this incident that bothers me; my name isn't
exactly highly classified information. What I do find extremely
bothersome about the behavior of this software is the level to which it
is representative of Microsoft's general attitude toward the consumer's
privacy and security. If one scours through the MS Knowledge Base,
there are dozens of documents pertaining to privacy and security related
issues involving the hidden metadata stored by the Office suite of
products, so obviously it *is* quite an issue. Search even harder, and
maybe you'll even find some specialty-tools to aid you in the removal of
this unwanted information, a rather passive approach to a problem which
could easily be eliminated by allowing users control over the
dissemination of their personal information in the first place, wouldn't
you say? But I'm getting off-topic. Excuse me.

I think the important point here is that *no* software should be
modifying your documents when you simply open them for reading!
Modifications should be user-initiated and confirmed. I think that
represents most people's expectation. Does anyone feel otherwise??
Deliberate or not, I can only conclude that this is a *bug* in Excel.
I haven't even gotten around to testing Word and other
Office-bloatware for similar bugs. I can't wait.


Dave
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
J

joust in jest

Right-click on any file (or folder) and select "Properties". You will see
the following information:

Created
Modified
Accessed

Whenever you access a file, the "accessed" properties are updated
accordingly.
This action is _not_ a bug -- it _is_ a security feature.

If the existing level of security does not meet your needs or your
sensibilities, then by all means implement a data encryption policy.

steve
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave Peterson

This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects
http://support.microsoft.com/default.aspx?scid=kb;ES;278579

Or this:
Office 2003/XP Add-in: Remove Hidden Data
http://www.microsoft.com/downloads/...ed-d43e-42ca-bc7b-5446d34e5360&DisplayLang=en

(one line in your browser)

or this:
How to minimize metadata in Microsoft Word 2002
http://support.microsoft.com/default.aspx?kbid=290945

or this:
The Remove Hidden Data tool for Office 2003 and Office XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;834427&Product=wd2002


And I'd bet that you could find more if you search the MS site.
 
D

Dave

Dave said:
This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects

And I'd bet that you could find more if you search the MS site.

I appreciate the links, but the problem doesn't really have to do with
personal metadata per se; the problem is that this information (or any
information at all) is changed or added to files simply by *opening*
them for read, not saving them. Programs should not be modifying files
simply by viewing them.

Dave
 
D

Dave

Dave said:
This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects

And I'd bet that you could find more if you search the MS site.

I appreciate the links, but the problem doesn't really have to do with
personal metadata per se; the problem is that this information (or any
information at all) is changed or added to files simply by *opening*
them for read, not saving them. Programs should not be modifying files
simply by viewing them.

Dave
 
D

Dave

Dave said:
This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects

And I'd bet that you could find more if you search the MS site.

I appreciate the links, but the problem doesn't really have to do with
personal metadata per se; the problem is that this information (or any
information at all) is changed or added to files simply by *opening*
them for read, not saving them. Programs should not be modifying files
simply by viewing them.

Dave
 
D

Dave

Dave said:
This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects

And I'd bet that you could find more if you search the MS site.

I appreciate the links, but the problem doesn't really have to do with
personal metadata per se; the problem is that this information (or any
information at all) is changed or added to files simply by *opening*
them for read, not saving them. Programs should not be modifying files
simply by viewing them.

Dave
 
D

Dave

Dave said:
This may help you:
OFFXP: "Remove Personal Information" Option Does Not Apply to Inserted Objects

And I'd bet that you could find more if you search the MS site.

I appreciate the links, but the problem doesn't really have to do with
personal metadata per se; the problem is that this information (or any
information at all) is changed or added to files simply by *opening*
them for read, not saving them. Programs should not be modifying files
simply by viewing them.

Dave
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top