What you can't see can hurt you

Printable View

February 18th, 2005, 11:33 PM
drsecure

What you can't see can hurt you

The fact that private and sensitve data can get buried in documents (Word, Excel, PPT, PDF, and many others) is getting more and more press. It's hard to believe that excel files which include database connections can have the database location and PASSWORD 'hidden' inside in clear text. That's only one example among dozens.

Microsofts 'Remove Hidden Data' Add-on addresses some privacy items but leaves all kinds of scary stuff in the docs. Has anyone tried the free tool from Bitform Technology on your documents? It's worth a look.

Bitform Discover

Also, have you ever noticed that when sending an attached Word document Outlook will add properties directly into the Word document that contain the sender's email address, display name, and subject line of the email? That's something I'd rather not have living on in my document after I send it.
February 19th, 2005, 12:01 AM
Tiger Shark

The later versions of Office allow you to remove those "pesky" personal details too you know..... Upgrade.... ;)
February 19th, 2005, 12:15 AM
jinxy

Quote:

The later versions of Office allow you to remove those "pesky" personal details too you know..... Upgrade....

Here's a $100000.00 kickback, keep it up my man.
February 19th, 2005, 12:22 AM
drsecure

Good point, Microsoft has addressed a few items, but only a few.

The later versions of Office only allow removal of very specific personal data. Network paths,
database passwords, network printer locations remain. Not to mention user names associated with a number of features. The real nuggets lie in features that have nothing to do with personal data.

Plus, I don't know about you, but I'm not all that comfortable telling all the users in my company to 'Please remember to remove personal data before you send email attachments'.
February 19th, 2005, 12:34 AM
foxyloxley

Quote:

Plus, I don't know about you, but I'm not all that comfortable telling all the users in my company to 'Please remember to remove personal data before you send email attachments'.

Where I used to work, that would probably entail them not writing their damn SIGNATURE on the thing :D
March 7th, 2005, 02:59 AM
drsecure

A particularly scary use case of how hidden data in Office docs can bite you ... forum members that upload Office documents can give away their true identity. Not that I've been checking :)