Encountered and Reported Security Issues in MS Office

In the most recent  ' Security Now  'Podcast #893'  by Steve Gibson, he discussed  the fact that Microsoft  has chosen not to fix a well understood security vulnerability currently in their OME (Office Method Encryption), that has existed for years,  a commonly used system, which claims to have a means to encrypt text in  Office, say before sending it or storing it.  

BUT they use ECB  'Electronic Code book' as a 'secure' method, which is well known to leak information.  ECB is well known to be insecure.  Microsoft has refused to fix or patch the Windows Office method.  I have personally examined ECB in the past, and its problems are obvious and well known. Especially for cases like stolen or diverted data. (Ransomware?)   A major issue for assumed security in MS Office.

Much more here   https://www.grc.com/sn/SN-893-Notes.pdf 

More on ECB Here:  https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#ECB 

Following, but please report any patching of this so I can inform followers. 

SQRL for Website Login and Authentication

More on Steve Gibson's SQRL, read through a bit of his site, below the WP description.  He has a very useful weekly podcast on security called 'Security Now'.   That I have followed for several years.  A good place to stay up to date on current IT technology security topics. 

Note the use of zero-knowledge proofs in their SQRL system described below:

In the Wikipedia:

SQRL (pronounced "squirrel")[3] or Secure, Quick, Reliable Login (formerly Secure QR Login) is a draft open standard for secure website login and authentication. The software typically uses a link of the scheme sqrl:// or optionally a QR code, where a user identifies via a pseudonymous zero-knowledge proof rather than providing a user ID and password. This method is thought to be impervious to a brute force password attack or data breach. It shifts the burden of security away from the party requesting the authentication and closer to the operating system implementation of what is possible on the hardware, as well as to the user. SQRL was proposed by Steve Gibson of Gibson Research Corporation in October 2013 as a way to simplify the process of authentication without the risk of revelation of information about the transaction to a third party ..... '

Extensive Video tutorial on SQRL:   https://youtu.be/Y6J1Yt8YYj0