Craig Maloney ☕ ✅ is a user on octodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

Oh shit.

Excel adds JavaScript support.

reddit.com/r/programming/comme

As if macro viruses weren't enough now we can worry about spreadsheets having crypto-mining malware.

This is not the future I signed up for.

@craigmaloney According to @Hairyears, VB Script has been in there for aaaaages; so, this is not a new risk.

Excel is his bread and butter, so he'd know.

Craig Maloney ☕ ✅ @craigmaloney

@artsyhonker @Hairyears Right, I remember the first iteration of Word macro viruses flitting about on our network at Ford. They have locked things down for VBA (mostly by making it so they don't auto-run). But VBA was a bit stripped down in capabilities (last I remember playing with it) so adding a full-on JavaScript engine in there with a bunch of folks who understand JavaScript is where my pessimism begins.

· Web · 0 · 0

@craigmaloney @artsyhonker @Hairyears

VBA can make the Windows API MemCopy 'RTL' call. After that, everything is possible.