Urgent.News

What's breaking now, across thousands of outlets.

Tech

The Halloween Documents revealed how Microsoft planned to extinguish Linux, but the open-source community turned it into a weapon

Its leak gave the open-source community vital intel versus the big leagues.

The Halloween Documents revealed how Microsoft planned to extinguish Linux, but the open-source community turned it into a weapon

Microsoft Office can now run on Linux without virtualization, thanks to a combination of Wine, GE-Proton, and the Bottles project. The Office Deployment Tool and Office itself are downloaded at install time by a script, and a Microsoft 365 license is required to sign in. The installation process downloads several gigabytes into a folder, and then runs the click-to-run installer inside a prefix.

The installer window may appear frozen for a long time. The Wine build from Valve/GloriousEggroll, called GE-Proton, is used instead of the stock Wine. A minimal version of the Microsoft Software Protection Platform (SPP) is included to handle licensing. The Office Licensing Service is used instead of the traditional product key system, allowing Office to authenticate through a signed-in Microsoft account.

Sign-in works with a personal Microsoft account, and Office fetches the account's entitlements. However, an actual license is not present, as the test account did not have a Microsoft 365 subscription that includes the desktop apps. The project team has verified that sign-in completes, Word shows the account's OneDrive documents, and Office fetches the account's entitlements.

Other WinRT gaps the ole32 shim fills for the licensing code, such as Windows.Globalization.Language statics and Windows.Data.Json.JsonObject statics. The project team has not verified the functionality of features like Microsoft account sign-in, OneNote, Teams, and any WinRT Windows.* APIs. The project is still in development and not a guarantee of full functionality.

Users can either buy or manage a Microsoft 365 subscription on the web and then sign in again in Word.

Written by urgent.news from Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at xda-developers.com →

More in Tech

I built a transport-independent foundation for JSON API clients in Perl

Writing a simple API client is easy. my $response = $http -> get ( $url ); Then the client starts being used in production.

  • HTTP::API::Core module created for transport-independent JSON API clients in Perl
  • Separates HTTP transport from API-client policy for flexibility
  • Allows developers to choose preferred HTTP library while handling common infrastructure

Automating Threat Intelligence: Integrating CVE Bots and Open Datasets into Your SecDevOps Pipeline

Originally published on tamiz.pro . Introduction: The Shift from Reactive to Proactive Security The traditional security operations model is no longer sufficient for the speed of modern software…

  • Automating threat intelligence integrates CVE bots and open datasets into SecDevOps pipeline.
  • Automated CVE tracking bots shift from static vulnerability lists to dynamic security postures.

The MCP server that changes its mind after you approve it

Here is an MCP server config. Nothing about it is unusual. { "mcpServers" : { "notes" : { "command" : "npx" , "args" : [ "-y" , "notes-mcp@1.2.0" ], "tools" : [ { "name" : "append_note"…

  • MCP server behavior changes post-approval, posing security risk
  • Tool descriptions integrated into model's context window, bypassing security tools
  • Proposed lockfile solution to lock down tool descriptions and detect changes

More from Sunday 20 September →