30-year-old file format behind MacOS hack

techxplore.com ^ | August 6, 2020 | by Peter Grad

[Red Badger]

MacWindows Ping!...................

[Dr. Sivana]

Time to try Navy DIF, Wordstar and Multiplan!

[Rio]

I’ve been a big Excel user for at least 30 years. I don’t think that I ever used SYLK files.

[Red Badger]

I was a Wordstar expert!...................

[gibsonguy]

“Wordstar”

Wordstar and DB Master. We thought they were enough to rule the world.

[rlmorel]

I went through a phase where I had to use SLYK files to overcome some technical obstacle (I can’t remember now, I recall it my have been the only way I could export out of one system and have it open properly in another, but it was a while back.)

[Red Badger]

I was pretty good with DB as well!..............

[Dr. Sivana]

William F. Buckley used Wordstar to the bitter end. I remain a WordPerfect guy myself, with a soft spot for Nota Bene and MacWrite Pro.

[Red Badger]

I loved Wordstar. I knew every command keyboard control by heart..........30 years ago.........

[gibsonguy]

Then there is the unsung hero, File Maker Pro.

[Dr. Sivana]

Then there is the unsung hero, File Maker Pro.

That is the main thing keeping me in Windows. Although the new version (19) is moving to "Cloud First" and a subscription model which I detest, so I will be staying with my perpetual license 18 for a while.

Now, if I could only come up with a way for it to do double/triple dimension ranking on the fly efficiently.

[Spirochete]

I’ve been a big Excel user for at least 30 years. I don’t think that I ever used SYLK files.

SYLK started as a export file format from Multiplan, the text precursor to Excel. It's more than 30 years old; more like 38 years.

I don't understand how the exploit works. SYLK content is just raw text and doesn't contain macros.

[Spirochete]

I don't understand how the exploit works. SYLK content is just raw text and doesn't contain macros.

I see now. It supports commands for executing code, like EXEC() and HALT().

https://outflank.nl/blog/2019/10/30/abusing-the-sylk-file-format/

Wikipedia

[Swordmaker]

Extremely VERY OBSCURE Microsoft Excel file type vulnerability in older Macs can have an exploit which could possibly be used by malicious actors to do something nasty. Oh My. . . What a scary thought. NOT! VERY RARE file type. . . And easily avoided by just renaming the file that HAS to start with a “$” to be dangerous. If you need that file (why?) just delete the “$” and go about your business. —PING!

APPLE + MICROSOFT EXCEL SECURITY PROBLEM? NO!
PING!

If you want on or off the Apple/Mac/iOS Ping List, Freepmail me.

[Swordmaker]

Thanks for the heads up.

[Richard Kimball]

Do they just write these articles by cutting and pasting, now, or do they use an AI with a database of scary catchphrases?

A security expert revealed this week that an exploit commonly used against Windows users

...former NSA security specialist who addressed the Black Hat security conference this week...

...Wardle fears these hacks may be just the tip of the iceberg.

...but also cautioned there likely are more problems to come.

These things are more predictable than the plot to a road runner cartoon. I note they haven't found anyone who's actually been hacked. The ONLY catchphrase I didn't find was "This is an important proof of concept."

[ProtectOurFreedom]

Visicalc!

[ProtectOurFreedom]

I had to use a SYLK file a week ago for some obscure reason. Hadn’t seen those in 20 years.

[ProtectOurFreedom]

“road runner cartoon plots are predictable”?

What? Seriously? That’s blasphemy!