From: llurch@networking.stanford.edu (Rich Graves)
Date: Sun, 22 Oct 95 23:01:03 PDT
To: llurch@Networking.Stanford.EDU
Subject: Microsoft "Encrypted" Documents Hack FYI
Message-ID: <199510230600.XAA01477@Networking.Stanford.EDU>
MIME-Version: 1.0
Content-Type: text/plain


I would provide the hack itself, but I'm on a Mac that lacks a proper
Base64 handler at the moment. For people who only know how to use
Netscape, the URL is news:465l8h$6sa@oznet03.ozemail.com.au.

-rich

From: lyal collins <lyalc@ozemail.com.au>
Newsgroups:
alt.security,comp.os.ms-windows.apps.misc,comp.os.ms-windows.win95.misc
Subject: Re: More Microsoft Security Bugs
Date: 19 Oct 1995 13:53:21 GMT
Organization: not very, at the moment
Lines: 366
Message-ID: <465l8h$6sa@oznet03.ozemail.com.au>
References: <llurch-1510951157410001@tip-mp3-ncs-3.stanford.edu>
NNTP-Posting-Host: slsyd3p02.ozemail.com.au
Mime-Version: 1.0
Content-Type: multipart/mixed;
        boundary="-------------------------------297591414826100"
X-Mailer: Mozilla 1.22 (Windows; I; 16bit)

Further to word document password protection, the attached offer a simple 
way to recover text in such files with this "protection".
The source is included - at least one shwareare developer has taken up 
on this technique and releases a VB based version.
cheers, lyal

-rich graves, llurch@networking.stanford.edu
 moderator of the win95netbugs list
 http://www-leland.stanford.edu/~llurch/win95netbugs/faq.html
 My old PGP key has been compromised. Please finger this account
 for the revocation certificate and my new key.