Re: Data hidden in Word documents

["Kurt Seifried" <[EMAIL PROTECTED]>]

> Huh? I've never seen "Undo" being available when opening a document in
> any version of Word I had my hands on. Under what circumstances did that
> happen (sorry, I seem to fail finding the article you are referring to)?
>
> I'm pretty much aware of the fact that Word *does* store this
> information, but I fail to see how the existence of an "Undo" feature
> (which is limited to the current session according to all of my
> observations) would be any kind of excuse for it.
>
> Regards
> Ansgar Wiechers


My bad, it appears to be primarily template based documents and documents
with change tracking enabled, versioning, or comments that are at fault, not
undo related. Although I could swear I've read stories about resumes/job
offers/etc. where having information revealed via undo was the fault it may
not be possible (must be getting semile). Thanks to fast saves (extra data
gets stored in the file), versioning, template based documents, comments and
change tracking there are several other possible methods for revealing older
data.

Change tracking/versioning/etc:
http://www.abanet.org/genpractice/magazine/june2003/protect.html

Word change tracking:
http://www.natterjackpr.com/2003/08/18.html#a698

Word template related:
http://www.theregister.co.uk/content/4/24740.html

Word metadata related:
http://www.computerbytesman.com/privacy/blair.htm


Kurt Seifried, [EMAIL PROTECTED]
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/



-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com