Re: Data hidden in Word documents

["lsi" <[EMAIL PROTECTED]>]

On 26 Aug 2003 at 17:02, Ansgar Wiechers wrote:

> On 2003-08-25 Kurt Seifried wrote:
> > > Undo does not work across closing and re-opening a document, so I
> > > would not expect undo-information to be enclosed in the document.
> > 
> > Yes it does. There have been many news stories broken when a reporter
> > gets a word doc PR release, hits undo and finds out some nugget

> Huh? I've never seen "Undo" being available when opening a document in
> any version of Word I had my hands on.

Me neither, doesn't work here.  But there is certainly stuff other 
than the core text of the document in some Word documents.  I'm 
fairly sure there's a Knowledgebase article discussing why fragments 
of other files can be found inside some *Office* documents (not just 
Word).

It's extremely dodgy and a very good reason for checking out 
OpenOffice: http://www.openoffice.org

Evidence of extraneous data can be found by opening a heavily-edited 
document and saving it as a different file.  The sizes of the two 
files can be quite different, while they look identical onscreen.

> I'm pretty much aware of the fact that Word *does* store this
> information, but I fail to see how the existence of an "Undo" feature
> (which is limited to the current session according to all of my
> observations) would be any kind of excuse for it.

There are inter-session change-tracking features which might be at 
least a little bit enabled.

Stuart
-- 
Stuart Udall
[EMAIL PROTECTED] - http://www.cyberdelix.net/
..revolution through evolution

want to make some cash? check out 
http://cyberdelix.net/affiliates.htm


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com