<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule"
	>
<channel>
	<title>Comments on: How to Hack ISO</title>
	<atom:link href="http://www.robweir.com/blog/2007/09/how-to-hack-iso.html/feed" rel="self" type="application/rss+xml" />
	<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html</link>
	<description>Thinking the unthinkable, pondering the imponderable, effing the ineffable and scruting the inscrutable</description>
	<lastBuildDate>Tue, 16 Mar 2010 03:07:49 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1210</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 17 Sep 2007 18:31:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1210</guid>
		<description>krs (and others) have been saying that this discredits not only Microsoft, but ISO. I don&#039;t think that&#039;s true.&lt;br/&gt;&lt;br/&gt;ISO has always worked on the assumption that no single interest will be powerful enough to game the system at the level of countries, while being desperate and brazen enough to want to. You can call this naive, but it worked for decades until now.&lt;br/&gt;&lt;br/&gt;Jon Postel didn&#039;t take spam into account when he designed SMTP; maybe he was naive, but it worked for over a decade. For that matter, it may have been naive of IETF to create a process that would lead to the internet&#039;s daily running being based on hundreds of RFCs that were likely to never become STD. Companies have tried to take advantage of that, by claiming that RFC822; in fact, I remember IBM claiming that Notes didn&#039;t have to follow the RFC822 standard because &quot;ït&#039;s not really a standard.&quot;&lt;br/&gt;&lt;br/&gt;But the IETF wasn&#039;t discredited, and Postel even less so. In fact, the explosion of bad-faith business on the internet caused the better businesses to look more to IETF as the only ones who had any inkling how to solve the problems.&lt;br/&gt;&lt;br/&gt;The same thing has to happen here--countries have to realize that ISO is the only real protection against Microsoft and against rubber-stamp standards bodies like ECMA.</description>
		<content:encoded><![CDATA[<p>krs (and others) have been saying that this discredits not only Microsoft, but ISO. I don&#8217;t think that&#8217;s true.</p>
<p>ISO has always worked on the assumption that no single interest will be powerful enough to game the system at the level of countries, while being desperate and brazen enough to want to. You can call this naive, but it worked for decades until now.</p>
<p>Jon Postel didn&#8217;t take spam into account when he designed SMTP; maybe he was naive, but it worked for over a decade. For that matter, it may have been naive of IETF to create a process that would lead to the internet&#8217;s daily running being based on hundreds of RFCs that were likely to never become STD. Companies have tried to take advantage of that, by claiming that RFC822; in fact, I remember IBM claiming that Notes didn&#8217;t have to follow the RFC822 standard because &#8220;ït&#8217;s not really a standard.&#8221;</p>
<p>But the IETF wasn&#8217;t discredited, and Postel even less so. In fact, the explosion of bad-faith business on the internet caused the better businesses to look more to IETF as the only ones who had any inkling how to solve the problems.</p>
<p>The same thing has to happen here&#8211;countries have to realize that ISO is the only real protection against Microsoft and against rubber-stamp standards bodies like ECMA.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1209</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 17 Sep 2007 18:17:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1209</guid>
		<description>When the same thing happened at INCITS, there was at least a plausible possibility that it wasn&#039;t Microsoft packing the board.&lt;br/&gt;&lt;br/&gt;Many people were fooled by Microsoft into believing OOXML was already and &quot;open&quot; &quot;standard.&quot; Some of these people created new projects, or even startup companies, to support OOXML on this basis. Presumably these people also believed that it was technically at least acceptable.* &lt;br/&gt;&lt;br/&gt;So, imagine that you&#039;re a CTO whose entire future is now bet on OOXML being a ubiquitous standard. You discover that it hasn&#039;t been voted on yet, and appears likely to lose. Whether you love Microsoft or hate them and are planning a lawsuit doesn&#039;t matter; your choice is clear: You shell out the $800 and delegate one of your employees to go vote yes. So, maybe Microsoft didn&#039;t pack INCITS.&lt;br/&gt;&lt;br/&gt;But you can&#039;t make the same argument over ISO. No country has bet its technological future on OOXML. (Surely a much larger percentage of, say, India&#039;s GNP comes from Microsoft technologies than Cote d&#039;Ivorie, and yet India voted no.) The only possible explanation is that Microsoft deliberately packed the board.&lt;br/&gt;&lt;br/&gt;* I have actually seen business plans for companies that declared that some Microsoft technology was a piece of crap, and by acknowleding this their new startup would be able to better compete with those who drank the Koolaid, but this is pretty rare, and I haven&#039;t heard of any successes. Let&#039;s just say that I almost invested in a company making Exchange appliances on this model, and I&#039;m glad I didn&#039;t.</description>
		<content:encoded><![CDATA[<p>When the same thing happened at INCITS, there was at least a plausible possibility that it wasn&#8217;t Microsoft packing the board.</p>
<p>Many people were fooled by Microsoft into believing OOXML was already and &#8220;open&#8221; &#8220;standard.&#8221; Some of these people created new projects, or even startup companies, to support OOXML on this basis. Presumably these people also believed that it was technically at least acceptable.* </p>
<p>So, imagine that you&#8217;re a CTO whose entire future is now bet on OOXML being a ubiquitous standard. You discover that it hasn&#8217;t been voted on yet, and appears likely to lose. Whether you love Microsoft or hate them and are planning a lawsuit doesn&#8217;t matter; your choice is clear: You shell out the $800 and delegate one of your employees to go vote yes. So, maybe Microsoft didn&#8217;t pack INCITS.</p>
<p>But you can&#8217;t make the same argument over ISO. No country has bet its technological future on OOXML. (Surely a much larger percentage of, say, India&#8217;s GNP comes from Microsoft technologies than Cote d&#8217;Ivorie, and yet India voted no.) The only possible explanation is that Microsoft deliberately packed the board.</p>
<p>* I have actually seen business plans for companies that declared that some Microsoft technology was a piece of crap, and by acknowleding this their new startup would be able to better compete with those who drank the Koolaid, but this is pretty rare, and I haven&#8217;t heard of any successes. Let&#8217;s just say that I almost invested in a company making Exchange appliances on this model, and I&#8217;m glad I didn&#8217;t.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1192</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Tue, 11 Sep 2007 18:46:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1192</guid>
		<description>The rejuvenation of ISO has begun. In this ballot we see how the energetic new participants contribute to the standardization process by not even bothering to return a comment:&lt;br/&gt;http://www.jtc1sc34.org/repository/0902.htm&lt;br/&gt;&lt;br/&gt;Thus, the proposal fails.&lt;br/&gt;&lt;br/&gt;Will ODF 1.2 and PDF be rejuvenated?&lt;br/&gt;&lt;br/&gt;MS has launched a DDOS attack on ISO and the global quest for open standards. Isn&#039;t it obvious?</description>
		<content:encoded><![CDATA[<p>The rejuvenation of ISO has begun. In this ballot we see how the energetic new participants contribute to the standardization process by not even bothering to return a comment:<br /><a href="http://www.jtc1sc34.org/repository/0902.htm" rel="nofollow">http://www.jtc1sc34.org/repository/0902.htm</a></p>
<p>Thus, the proposal fails.</p>
<p>Will ODF 1.2 and PDF be rejuvenated?</p>
<p>MS has launched a DDOS attack on ISO and the global quest for open standards. Isn&#8217;t it obvious?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: PolR</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1183</link>
		<dc:creator>PolR</dc:creator>
		<pubDate>Sun, 09 Sep 2007 22:44:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1183</guid>
		<description>In all fairness, there are only 8 NB that had actually voted on this one. It would have failed even without the new members.&lt;br/&gt;&lt;br/&gt;I suppose the OOXML ballot has siphoned all the attention from the SC34 members lately. There was little time left to consider the issues in other ballots. The real test will be with ballots occurring post-OOXML.</description>
		<content:encoded><![CDATA[<p>In all fairness, there are only 8 NB that had actually voted on this one. It would have failed even without the new members.</p>
<p>I suppose the OOXML ballot has siphoned all the attention from the SC34 members lately. There was little time left to consider the issues in other ballots. The real test will be with ballots occurring post-OOXML.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1182</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Sun, 09 Sep 2007 21:55:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1182</guid>
		<description>Yes, it has begun.</description>
		<content:encoded><![CDATA[<p>Yes, it has begun.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dario</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1181</link>
		<dc:creator>dario</dc:creator>
		<pubDate>Sun, 09 Sep 2007 19:33:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1181</guid>
		<description>rob said:&lt;br/&gt;&lt;i&gt;Although this attempt to juice their results by signing up new P-members did not help Microsoft win approval for OOXML, it remains to be seen what adverse effect this will have on other JTC1 activities. We need to remember that a participation rate of 50% of JTC1 P-members is required to transact most JTC1 business. So this &quot;rejuvenation&quot; may very well paralyze JTC1 entirely unless the new members are earnest and participate in ballots beyond OOXML.&lt;br/&gt;&lt;/i&gt;&lt;br/&gt;&lt;br/&gt;It seems that the paralyzation just started:&lt;br/&gt;&lt;br/&gt;See the result of this recent JTC1/SC34 ballot: &lt;br/&gt;&lt;br/&gt;&lt;a HREF=&quot;http://www.jtc1sc34.org/repository/0902.htm&quot; REL=&quot;nofollow&quot; rel=&quot;nofollow&quot;&gt;http://www.jtc1sc34.org/repository/0902.htm&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;Citing: &lt;br/&gt;&lt;br/&gt;&lt;i&gt;&quot;Based on an insufficient response from the SC 34 participating membership, this ballot has automatically failed according to Directives 9.1.10 that states &quot;if more than 50% of the P-members have not voted, the vote will have failed.&quot;&lt;/i&gt;&lt;br/&gt;&lt;br/&gt;Worrying ... may be Microsoft could instruct his P-memberts to leave SC34 once this OOXML voting has finished. So, the &quot;original&quot; P-members could continue working ( this is the goal of SC34 isn&#039;t it?: to do technical work and not to &quot;overflow&quot; ballots )</description>
		<content:encoded><![CDATA[<p>rob said:<br /><i>Although this attempt to juice their results by signing up new P-members did not help Microsoft win approval for OOXML, it remains to be seen what adverse effect this will have on other JTC1 activities. We need to remember that a participation rate of 50% of JTC1 P-members is required to transact most JTC1 business. So this &#8220;rejuvenation&#8221; may very well paralyze JTC1 entirely unless the new members are earnest and participate in ballots beyond OOXML.<br /></i></p>
<p>It seems that the paralyzation just started:</p>
<p>See the result of this recent JTC1/SC34 ballot: </p>
<p><a HREF="http://www.jtc1sc34.org/repository/0902.htm" REL="nofollow" rel="nofollow">http://www.jtc1sc34.org/repository/0902.htm</a></p>
<p>Citing: </p>
<p><i>&#8220;Based on an insufficient response from the SC 34 participating membership, this ballot has automatically failed according to Directives 9.1.10 that states &#8220;if more than 50% of the P-members have not voted, the vote will have failed.&#8221;</i></p>
<p>Worrying &#8230; may be Microsoft could instruct his P-memberts to leave SC34 once this OOXML voting has finished. So, the &#8220;original&#8221; P-members could continue working ( this is the goal of SC34 isn&#8217;t it?: to do technical work and not to &#8220;overflow&#8221; ballots )</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: PolR</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1180</link>
		<dc:creator>PolR</dc:creator>
		<pubDate>Sun, 09 Sep 2007 05:51:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1180</guid>
		<description>Rob, thanks for the answer.&lt;br/&gt;&lt;br/&gt;There is another scenario to look at.&lt;br/&gt;&lt;br/&gt;Suppose over 1/3 of the P members don&#039;t vote on a standard Microsoft doesn&#039;t want approved. They effectively raise the bar to get the 50% P-member voting threshold.&lt;br/&gt;&lt;br/&gt;I don&#039;t know what is the usual participation of P-members to ballots but if there routinely is 1/6 of P-members that happen not to vote on a given ballot due to lack of interest or other reasons, then over 1/3 + 1/6 is over 50% which is the second of your magic numbers. &lt;br/&gt;&lt;br/&gt;The key point here is there is no need to obstruct by actually voting no. Mere inaction will do.&lt;br/&gt;&lt;br/&gt;In such scenario proving motive is hard. Non voting P-members don&#039;t cast votes and don&#039;t issue comments. They may even not hold any meetings at NB level and won&#039;t leave a track record of meeting minutes. How do you tell a non-voting member doing obstruction from a non voting member that just lack interest in a particular ballot? &lt;br/&gt;&lt;br/&gt;The only way to show motive that I can think of is to observe a trend in behavior over a series of ballots. Microsoft has the ability to jam such observations by generating noise in the behavior pattern. If they want to, they may themselves vote in the opposite direction of their interest, relying on the inaction of P countries to block the proposed standard. They also have the ability to call its army to vote somehow on insignificant (to them) standards and reserving the obstruction tactics to ballots that really matter. Both tactics will make behavior patterns harder to show and harder to attribute to Microsoft actions.&lt;br/&gt;&lt;br/&gt;I don&#039;t say this is Microsoft strategy and I don&#039;t want to suggest they intend to do something like this. With the evidence we have, such statements would be conjecture at best. But as you said, they have the capability to pull out this sort of things and it is prudent to consider the consequences of such action.</description>
		<content:encoded><![CDATA[<p>Rob, thanks for the answer.</p>
<p>There is another scenario to look at.</p>
<p>Suppose over 1/3 of the P members don&#8217;t vote on a standard Microsoft doesn&#8217;t want approved. They effectively raise the bar to get the 50% P-member voting threshold.</p>
<p>I don&#8217;t know what is the usual participation of P-members to ballots but if there routinely is 1/6 of P-members that happen not to vote on a given ballot due to lack of interest or other reasons, then over 1/3 + 1/6 is over 50% which is the second of your magic numbers. </p>
<p>The key point here is there is no need to obstruct by actually voting no. Mere inaction will do.</p>
<p>In such scenario proving motive is hard. Non voting P-members don&#8217;t cast votes and don&#8217;t issue comments. They may even not hold any meetings at NB level and won&#8217;t leave a track record of meeting minutes. How do you tell a non-voting member doing obstruction from a non voting member that just lack interest in a particular ballot? </p>
<p>The only way to show motive that I can think of is to observe a trend in behavior over a series of ballots. Microsoft has the ability to jam such observations by generating noise in the behavior pattern. If they want to, they may themselves vote in the opposite direction of their interest, relying on the inaction of P countries to block the proposed standard. They also have the ability to call its army to vote somehow on insignificant (to them) standards and reserving the obstruction tactics to ballots that really matter. Both tactics will make behavior patterns harder to show and harder to attribute to Microsoft actions.</p>
<p>I don&#8217;t say this is Microsoft strategy and I don&#8217;t want to suggest they intend to do something like this. With the evidence we have, such statements would be conjecture at best. But as you said, they have the capability to pull out this sort of things and it is prudent to consider the consequences of such action.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1179</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Sat, 08 Sep 2007 17:10:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1179</guid>
		<description>PolR,&lt;br/&gt;&lt;br/&gt;If you want to look at it that way, there are three magic numbers:&lt;br/&gt;&lt;br/&gt;* 1/3 of P-members can prevent any ballot from passing by actively voting No.&lt;br/&gt;&lt;br/&gt;* 50% of P-members can prevent any ballot from passing by passively not voting.  Think of it as a &quot;&lt;a HREF=&quot;http://en.wikipedia.org/wiki/Pocket_veto&quot; REL=&quot;nofollow&quot; rel=&quot;nofollow&quot;&gt;pocket veto&lt;/a&gt;.&quot;&lt;br/&gt;&lt;br/&gt;* 2/3 of P-members can make any ballot be approved.&lt;br/&gt;&lt;br/&gt;So if someone wanted to be the &quot;gate keeper&quot; and be able to extort a toll from every standard that passes through JTC1, they would need to at the very least line up 1/3 of P-members and have them vote No on every proposal that they did not favor.  &lt;br/&gt;&lt;br/&gt;I certainly wouldn&#039;t recommend this to anyone, and I don&#039;t want to suggest that this is Microsoft&#039;s motive.  But they have assembled an army sufficient to do this, and it is prudent to at least consider the consequences if they decided to use it. One strategy certainly could be, if you can&#039;t beat them, then destroy ISO and the other systems that produce open standards.  The first thing the ugly queen does is order all the mirrors in the kingdom to be broken.</description>
		<content:encoded><![CDATA[<p>PolR,</p>
<p>If you want to look at it that way, there are three magic numbers:</p>
<p>* 1/3 of P-members can prevent any ballot from passing by actively voting No.</p>
<p>* 50% of P-members can prevent any ballot from passing by passively not voting.  Think of it as a &#8220;<a HREF="http://en.wikipedia.org/wiki/Pocket_veto" REL="nofollow" rel="nofollow">pocket veto</a>.&#8221;</p>
<p>* 2/3 of P-members can make any ballot be approved.</p>
<p>So if someone wanted to be the &#8220;gate keeper&#8221; and be able to extort a toll from every standard that passes through JTC1, they would need to at the very least line up 1/3 of P-members and have them vote No on every proposal that they did not favor.  </p>
<p>I certainly wouldn&#8217;t recommend this to anyone, and I don&#8217;t want to suggest that this is Microsoft&#8217;s motive.  But they have assembled an army sufficient to do this, and it is prudent to at least consider the consequences if they decided to use it. One strategy certainly could be, if you can&#8217;t beat them, then destroy ISO and the other systems that produce open standards.  The first thing the ugly queen does is order all the mirrors in the kingdom to be broken.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Torsten Werner</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1178</link>
		<dc:creator>Torsten Werner</dc:creator>
		<pubDate>Sat, 08 Sep 2007 07:26:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1178</guid>
		<description>After the irregularities in Germany Microsoft tries to prevent the publication of the german comments now. But SC34 has already published all comments at http://www.jtc1sc34.org/repository/0950.htm#N0904 (document 0904).</description>
		<content:encoded><![CDATA[<p>After the irregularities in Germany Microsoft tries to prevent the publication of the german comments now. But SC34 has already published all comments at <a href="http://www.jtc1sc34.org/repository/0950.htm#N0904" rel="nofollow">http://www.jtc1sc34.org/repository/0950.htm#N0904</a> (document 0904).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: PolR</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1177</link>
		<dc:creator>PolR</dc:creator>
		<pubDate>Sat, 08 Sep 2007 05:22:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1177</guid>
		<description>Thanks for the explanation Rob.&lt;br/&gt;&lt;br/&gt;Then the next question is how much does Microsoft need a working JTC1? Or more to the point, how much do they need a *non* working JTC1?&lt;br/&gt;&lt;br/&gt;They need it working fine to fast track things like XPS and Silverlight into ISO standards.&lt;br/&gt;&lt;br/&gt;On the other hand they have been burned with ODF. They may not want more ISO standards they don&#039;t control that could get in their way.&lt;br/&gt;&lt;br/&gt;My understanding of your explanation of the P to O demotion process is it is designed to handle a single inactive P member in an otherwise well behaving group. It is not designed to handle the paralysis resulting from multiple inactive or obstructing P members. Am I correct?&lt;br/&gt;&lt;br/&gt;Now that the techniques to hack ISO are known, denial of service attacks are possible if a sufficient number of P members only vote on matters of interest to Microsoft. They may not even need to vote No on other matters to stall JTC1 if it means JTC1 doesn&#039;t meet the 50% voting threshold.&lt;br/&gt;&lt;br/&gt;By the time someone figures what is going on and the demotion process is done, more new P members may join in and take the relay. This can go on for  years before the process is fixed and JTC1 can function again.&lt;br/&gt;&lt;br/&gt;I don&#039;t say Microsoft will do this. I just say that the possibility is there, available for use to anybody with enough motivation and resources to use such tactics.&lt;br/&gt;&lt;br/&gt;It is scary what you get when you apply what you learned about computer security to ISO standard processes, isn&#039;t it?</description>
		<content:encoded><![CDATA[<p>Thanks for the explanation Rob.</p>
<p>Then the next question is how much does Microsoft need a working JTC1? Or more to the point, how much do they need a *non* working JTC1?</p>
<p>They need it working fine to fast track things like XPS and Silverlight into ISO standards.</p>
<p>On the other hand they have been burned with ODF. They may not want more ISO standards they don&#8217;t control that could get in their way.</p>
<p>My understanding of your explanation of the P to O demotion process is it is designed to handle a single inactive P member in an otherwise well behaving group. It is not designed to handle the paralysis resulting from multiple inactive or obstructing P members. Am I correct?</p>
<p>Now that the techniques to hack ISO are known, denial of service attacks are possible if a sufficient number of P members only vote on matters of interest to Microsoft. They may not even need to vote No on other matters to stall JTC1 if it means JTC1 doesn&#8217;t meet the 50% voting threshold.</p>
<p>By the time someone figures what is going on and the demotion process is done, more new P members may join in and take the relay. This can go on for  years before the process is fixed and JTC1 can function again.</p>
<p>I don&#8217;t say Microsoft will do this. I just say that the possibility is there, available for use to anybody with enough motivation and resources to use such tactics.</p>
<p>It is scary what you get when you apply what you learned about computer security to ISO standard processes, isn&#8217;t it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1176</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Fri, 07 Sep 2007 22:55:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1176</guid>
		<description>Indeed, that is my concern: the paralysis of JTC1.&lt;br/&gt;&lt;br/&gt;Now there is procedure for a P-member to be demoted to an O-member if they miss votes and fail to respond when reminded of their voting obligations.  The NB could then reapply for P-membership after 12 months.  I do not see this rule being currently applied.  &lt;br/&gt;&lt;br/&gt;So in theory this problem is correctable, though a number of ballots could still fail while awaiting this procedure to kick in. &lt;br/&gt;&lt;br/&gt;Maybe we need a new category of membership &quot;JTC1 M-member&quot; who are only counted for Microsoft/Ecma fast track ballots.</description>
		<content:encoded><![CDATA[<p>Indeed, that is my concern: the paralysis of JTC1.</p>
<p>Now there is procedure for a P-member to be demoted to an O-member if they miss votes and fail to respond when reminded of their voting obligations.  The NB could then reapply for P-membership after 12 months.  I do not see this rule being currently applied.  </p>
<p>So in theory this problem is correctable, though a number of ballots could still fail while awaiting this procedure to kick in. </p>
<p>Maybe we need a new category of membership &#8220;JTC1 M-member&#8221; who are only counted for Microsoft/Ecma fast track ballots.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: PolR</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1175</link>
		<dc:creator>PolR</dc:creator>
		<pubDate>Fri, 07 Sep 2007 20:02:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1175</guid>
		<description>This raises an interesting question. What if the new P-members stop participating now that OOXML has been voted on? Could SC34 be stalled until  someone finds a way to relegate these countries back to O status?</description>
		<content:encoded><![CDATA[<p>This raises an interesting question. What if the new P-members stop participating now that OOXML has been voted on? Could SC34 be stalled until  someone finds a way to relegate these countries back to O status?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1174</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Fri, 07 Sep 2007 17:53:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1174</guid>
		<description>JTC1 Directives 9.1.10 says &quot;At all levels of voting, if more than 50% of the P-members have not voted, the vote will have failed. Late votes shall not be counted. No extensions shall be granted.&quot;&lt;br/&gt;&lt;br/&gt;If you look at recent ballots you&#039;ll see that there is a core membership that participate and vote on most proposals.  This core membership previously constituted over 50% of P-members, but think this is no longer true.  So we may have a problem on our hands.</description>
		<content:encoded><![CDATA[<p>JTC1 Directives 9.1.10 says &#8220;At all levels of voting, if more than 50% of the P-members have not voted, the vote will have failed. Late votes shall not be counted. No extensions shall be granted.&#8221;</p>
<p>If you look at recent ballots you&#8217;ll see that there is a core membership that participate and vote on most proposals.  This core membership previously constituted over 50% of P-members, but think this is no longer true.  So we may have a problem on our hands.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1173</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Fri, 07 Sep 2007 16:25:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1173</guid>
		<description>Rob,&lt;br/&gt;&lt;br/&gt;The following link shows outstanding ballots fro JTC1/SC34:&lt;br/&gt;&lt;br/&gt;http://www.jtc1sc34.org/document/secretariat_temp.html#calmtg&lt;br/&gt;&lt;br/&gt;If I read this correctly combined with your post, is 50% participation required for this business to complete?  There are six outstanding ballots between now and the end of the year.</description>
		<content:encoded><![CDATA[<p>Rob,</p>
<p>The following link shows outstanding ballots fro JTC1/SC34:</p>
<p><a href="http://www.jtc1sc34.org/document/secretariat_temp.html#calmtg" rel="nofollow">http://www.jtc1sc34.org/document/secretariat_temp.html#calmtg</a></p>
<p>If I read this correctly combined with your post, is 50% participation required for this business to complete?  There are six outstanding ballots between now and the end of the year.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1171</link>
		<dc:creator>Rob</dc:creator>
		<pubDate>Thu, 06 Sep 2007 12:43:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1171</guid>
		<description>BSchröder, remember the ODF ballot was a JTC1/SC34 ballot, but OOXML had a JTC1 ballot.  So these are two different committees with two different memberships.  Certainly many NB&#039;s are members of both, but the size of these two memberships are not related.  The numbers I gave are for JTC1.  It sounds like you are starting from with the SC34 membership in 2006.</description>
		<content:encoded><![CDATA[<p>BSchröder, remember the ODF ballot was a JTC1/SC34 ballot, but OOXML had a JTC1 ballot.  So these are two different committees with two different memberships.  Certainly many NB&#8217;s are members of both, but the size of these two memberships are not related.  The numbers I gave are for JTC1.  It sounds like you are starting from with the SC34 membership in 2006.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1170</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Thu, 06 Sep 2007 12:12:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1170</guid>
		<description>&quot;No, the only hope is within the ISO itself. It has always been willing to tolerate the gaming of the system to a certain degree, but it knows it cannot tolerate overt corruption.&quot;&lt;br/&gt;&lt;br/&gt;I think we saw in Sweden what would be the easiest action. The real problem in Sweden was that MS had bought votes, ie, blatant corruption. Instead of going through the difficult and uncertain way of starting legal action, the Swedisch committee rejected the vote on a &quot;technicality&quot;: One member had voted twice.&lt;br/&gt;&lt;br/&gt;I would think the most we can expect from ISO is that they throw MSOOXML from the fast-track on a technicality. Eg, the fact that MS&#039; online patent pledge falls far short of the required &quot;IP&quot; formalities (as I understood). Or the fact that MSOOXML clashes with another ISO standard (eg, the rediculous date problem). MSOOXML can still become an ISO standard, just not in fast track. Say, use the French proposal of making it a technical &quot;standard&quot; for three year.&lt;br/&gt;&lt;br/&gt;Then ISO does not have to change its rules in a hurry, and does not have to challenge MS in court. They can even formulate it in ways that would save MS&#039; face.&lt;br/&gt;&lt;br/&gt;Winter</description>
		<content:encoded><![CDATA[<p>&#8220;No, the only hope is within the ISO itself. It has always been willing to tolerate the gaming of the system to a certain degree, but it knows it cannot tolerate overt corruption.&#8221;</p>
<p>I think we saw in Sweden what would be the easiest action. The real problem in Sweden was that MS had bought votes, ie, blatant corruption. Instead of going through the difficult and uncertain way of starting legal action, the Swedisch committee rejected the vote on a &#8220;technicality&#8221;: One member had voted twice.</p>
<p>I would think the most we can expect from ISO is that they throw MSOOXML from the fast-track on a technicality. Eg, the fact that MS&#8217; online patent pledge falls far short of the required &#8220;IP&#8221; formalities (as I understood). Or the fact that MSOOXML clashes with another ISO standard (eg, the rediculous date problem). MSOOXML can still become an ISO standard, just not in fast track. Say, use the French proposal of making it a technical &#8220;standard&#8221; for three year.</p>
<p>Then ISO does not have to change its rules in a hurry, and does not have to challenge MS in court. They can even formulate it in ways that would save MS&#8217; face.</p>
<p>Winter</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: BSchröder</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1169</link>
		<dc:creator>BSchröder</dc:creator>
		<pubDate>Thu, 06 Sep 2007 10:59:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1169</guid>
		<description>Hi Rob,&lt;br/&gt;&lt;br/&gt;I was looking for exactly the same numbers on JTC-1 evolution but I have different results. &lt;br/&gt;&lt;br/&gt;From notes taken when ODF was ratified, I have 24 P members in May 2006 and another note with 30P members in January 2007&lt;br/&gt;&lt;br/&gt;However, you say + 4 in 2006; + 12 in 2007 while I have + 6 and + 11&lt;br/&gt;&lt;br/&gt;As your vote total of 43 P members is obviously wrong (the ISO web sites today identifies only 41 P countries), I think you may have a problem with your numbers. &lt;br/&gt;&lt;br/&gt;Could you share your sources about P member evolution at JTC-1?</description>
		<content:encoded><![CDATA[<p>Hi Rob,</p>
<p>I was looking for exactly the same numbers on JTC-1 evolution but I have different results. </p>
<p>From notes taken when ODF was ratified, I have 24 P members in May 2006 and another note with 30P members in January 2007</p>
<p>However, you say + 4 in 2006; + 12 in 2007 while I have + 6 and + 11</p>
<p>As your vote total of 43 P members is obviously wrong (the ISO web sites today identifies only 41 P countries), I think you may have a problem with your numbers. </p>
<p>Could you share your sources about P member evolution at JTC-1?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1168</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Thu, 06 Sep 2007 10:03:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1168</guid>
		<description>From my point of view...&lt;br/&gt;&lt;br/&gt;ODF will need two elements to appear as superior to OOXML. One is the spreadsheet parts included in the standard. This is already on the way...we must make sure that all voting members at the feb meeting understand this. &lt;br/&gt;&lt;br/&gt;The second thing is that ODF need to have macro support in the long run. Most people probably agree that macros don&#039;t serve much purpose except virus spreading...yet their absence mean that Microsoft have something critical. They can state that it impossible to convert old office documents to ODF since the macro part, that &quot;might&quot; be needed by their customers, can&#039;t be converted. If ODF work included a branch that works on macro extensions the whole reason to have ooxml as standard becomes void. &lt;br/&gt;&lt;br/&gt;Could an open source work group be started that examine how ODF might be extended with macro capability? If there was such group I think it would weaken microsofts position even if the group had not any official position. Even better if the ODF crew could start up work with macros themselves...they don&#039;t need to make much progress or promise that the macros will be included in the end. Just the fact that ODF works with the problem would make Microsoft unable to claim that their new standard solves something that ODF lacks. &lt;br/&gt;&lt;br/&gt;Finally this brings us to what we can do...surely the fact that Sweden changed its vote show the way to go. SIS in sweden used a formality, that by logics did not affect the outcome of the vote, to change the vote to what was morally right. The reason is most probably that the papers wrote about it. When nobody watch people are inclined to avoid to take the fight, they are just a single vote and it is very unpleasant to stand on your own. &lt;br/&gt;&lt;br/&gt;Yet if main stream papers has highlighted how flawed ooxml is, what kind of countries that support the standard, that the final ODF standard will handle everything despite what Microsoft claims and how Microsoft tries to abuse the fast track procedure...the SB personal will have the situation that their credibility will be challenged if the don&#039;t reject ooxml. They will be opposite the public opinion if they vote postive.&lt;br/&gt;&lt;br/&gt;Make main stream papers write about what is happening and Microsoft will be doomed. If only blogs like this are source of information about what is wrong with ooxml most voting persons next year will probably never have heard the valid critcism because the public opinion does not require them to really investigate the criticism.</description>
		<content:encoded><![CDATA[<p>From my point of view&#8230;</p>
<p>ODF will need two elements to appear as superior to OOXML. One is the spreadsheet parts included in the standard. This is already on the way&#8230;we must make sure that all voting members at the feb meeting understand this. </p>
<p>The second thing is that ODF need to have macro support in the long run. Most people probably agree that macros don&#8217;t serve much purpose except virus spreading&#8230;yet their absence mean that Microsoft have something critical. They can state that it impossible to convert old office documents to ODF since the macro part, that &#8220;might&#8221; be needed by their customers, can&#8217;t be converted. If ODF work included a branch that works on macro extensions the whole reason to have ooxml as standard becomes void. </p>
<p>Could an open source work group be started that examine how ODF might be extended with macro capability? If there was such group I think it would weaken microsofts position even if the group had not any official position. Even better if the ODF crew could start up work with macros themselves&#8230;they don&#8217;t need to make much progress or promise that the macros will be included in the end. Just the fact that ODF works with the problem would make Microsoft unable to claim that their new standard solves something that ODF lacks. </p>
<p>Finally this brings us to what we can do&#8230;surely the fact that Sweden changed its vote show the way to go. SIS in sweden used a formality, that by logics did not affect the outcome of the vote, to change the vote to what was morally right. The reason is most probably that the papers wrote about it. When nobody watch people are inclined to avoid to take the fight, they are just a single vote and it is very unpleasant to stand on your own. </p>
<p>Yet if main stream papers has highlighted how flawed ooxml is, what kind of countries that support the standard, that the final ODF standard will handle everything despite what Microsoft claims and how Microsoft tries to abuse the fast track procedure&#8230;the SB personal will have the situation that their credibility will be challenged if the don&#8217;t reject ooxml. They will be opposite the public opinion if they vote postive.</p>
<p>Make main stream papers write about what is happening and Microsoft will be doomed. If only blogs like this are source of information about what is wrong with ooxml most voting persons next year will probably never have heard the valid critcism because the public opinion does not require them to really investigate the criticism.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1167</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Thu, 06 Sep 2007 04:51:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1167</guid>
		<description>The problem here is not strictly or even largely a failure in the ISO. A large part of this problem originates with Ecma. Ecma&#039;s special status allows proposals submitted through them to bypass most of the ISO review process. Ecma states that 80% of the standards which went through the ISO fast-track procedure originated with Ecma. &lt;br/&gt;&lt;br/&gt;Ecma has a standard presentation on their web site describing what they do. In the section titled &quot;What is Ecma’s value?&quot;, they state:&lt;br/&gt;&lt;br/&gt; ==========================&lt;br/&gt;&lt;br/&gt;Offers industry a &quot;&lt;b&gt;fast track&lt;/b&gt;&quot;, to global standards bodies, through &lt;br/&gt;which standards are made available on time;&lt;br/&gt;&lt;br/&gt;... balance between timeliness and&lt;br/&gt;quality ...&lt;br/&gt;&lt;br/&gt;Balances Technical Quality and &lt;b&gt;Business Value&lt;/b&gt;&lt;br/&gt;&lt;br/&gt;                                        Offers a path which will &lt;b&gt;minimise risk of changes&lt;/b&gt; to input specs&lt;br/&gt;&lt;br/&gt; ==========================&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;The emphasis shown above is as in the original text. In other words, Ecma themselves claim that you should use them to ram your proposals through the ISO as quickly as possible and without changes. This isn&#039;t some wild claim being made by a Microsoft opponent; these are Ecma&#039;s own words on why you should go through them. I can&#039;t imagine a more damming indictment. &lt;br/&gt;&lt;br/&gt;Given this and given the current fiasco, it is difficult to see why the ISO should maintain the current fast track special relationship with Ecma. Ecma can&#039;t provide a reasonable review process which substitutes for the ISO&#039;s own; indeed as they admit themselves, they don&#039;t even try to. &lt;br/&gt;&lt;br/&gt;TC45 was the Ecma committee that produced OOXML. TC46 is the Ecma committee that is working on XPS, which is Microsoft&#039;s proposed replacement for PDF. In the XPS presentation (from the Ecma web site), Microsoft draws out a comparison between OOXML and XPS, where they see XPS as following directly from OOXML. In other words, we are looking at repeating this whole process again with another standard.&lt;br/&gt;&lt;br/&gt;The ISO should suspend Ecma&#039;s fast track privileges until and unless Ecma can show that they can provide adequate review of standards with openness and proper public participation. If the ISO doesn&#039;t take this measure, then Ecma will be a millstone around the ISO&#039;s neck dragging it down into disrepute and irrelevance.</description>
		<content:encoded><![CDATA[<p>The problem here is not strictly or even largely a failure in the ISO. A large part of this problem originates with Ecma. Ecma&#8217;s special status allows proposals submitted through them to bypass most of the ISO review process. Ecma states that 80% of the standards which went through the ISO fast-track procedure originated with Ecma. </p>
<p>Ecma has a standard presentation on their web site describing what they do. In the section titled &#8220;What is Ecma’s value?&#8221;, they state:</p>
<p> ==========================</p>
<p>Offers industry a &#8220;<b>fast track</b>&#8220;, to global standards bodies, through <br />which standards are made available on time;</p>
<p>&#8230; balance between timeliness and<br />quality &#8230;</p>
<p>Balances Technical Quality and <b>Business Value</b></p>
<p>                                        Offers a path which will <b>minimise risk of changes</b> to input specs</p>
<p> ==========================</p>
<p>The emphasis shown above is as in the original text. In other words, Ecma themselves claim that you should use them to ram your proposals through the ISO as quickly as possible and without changes. This isn&#8217;t some wild claim being made by a Microsoft opponent; these are Ecma&#8217;s own words on why you should go through them. I can&#8217;t imagine a more damming indictment. </p>
<p>Given this and given the current fiasco, it is difficult to see why the ISO should maintain the current fast track special relationship with Ecma. Ecma can&#8217;t provide a reasonable review process which substitutes for the ISO&#8217;s own; indeed as they admit themselves, they don&#8217;t even try to. </p>
<p>TC45 was the Ecma committee that produced OOXML. TC46 is the Ecma committee that is working on XPS, which is Microsoft&#8217;s proposed replacement for PDF. In the XPS presentation (from the Ecma web site), Microsoft draws out a comparison between OOXML and XPS, where they see XPS as following directly from OOXML. In other words, we are looking at repeating this whole process again with another standard.</p>
<p>The ISO should suspend Ecma&#8217;s fast track privileges until and unless Ecma can show that they can provide adequate review of standards with openness and proper public participation. If the ISO doesn&#8217;t take this measure, then Ecma will be a millstone around the ISO&#8217;s neck dragging it down into disrepute and irrelevance.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nate</title>
		<link>http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1166</link>
		<dc:creator>Nate</dc:creator>
		<pubDate>Wed, 05 Sep 2007 19:48:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.robweir.com/blog/2007/09/how-to-hack-iso.html#comment-1166</guid>
		<description>@temporalbeing&lt;br/&gt;&lt;br/&gt;I think it&#039;s pretty likely that the strategy will be to move more of the yes-voting O members into the P group.  That is certainly the path of least resistance here.&lt;br/&gt;&lt;br/&gt;Then it&#039;s only necessary to change a a single No to a Yes.</description>
		<content:encoded><![CDATA[<p>@temporalbeing</p>
<p>I think it&#8217;s pretty likely that the strategy will be to move more of the yes-voting O members into the P group.  That is certainly the path of least resistance here.</p>
<p>Then it&#8217;s only necessary to change a a single No to a Yes.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.570 seconds -->
