Yet another Hacker News

41 points gcanyon 2 hours ago 33 comments

The github repo under eigenpal is gone. The web site at docx-editor is 503. No idea what's going on.

gcanyon 2 hours ago | parent

I can't include the links because HN filters dead links.

rolph 2 hours ago | parent

it is forseeable that MS would be very interested in taking a security stance vs a very possible vector.

conartist6 1 hour ago | parent

I was going to guess that they accused the author of copying code from Office. Was AI used in the project? Perhaps a model regurgitated copyrighted code leading to a sternly worded notice from legal...?

conartist6 1 hour ago | parent

Ooooh yeah. Looking through the author's past posts: "got a lot of skepticism because we're developing heavily with AI"

So AI was in use. Then the author says that following the spec alone wasn't enough to get it working, they got "active community feedback" and fed that feedback into the AI until it worked just like Word. I have to think that if there were ANY conditions under which a model might output code that Microsoft legal would threaten to sue you for, these would be them

ForOldHack 45 minutes ago | parent

Clearly, it was the fault of the AI, and it should be thrown in jail.

conartist6 32 minutes ago | parent

I think this (if it is what happened) is a perfect demonstration of the dynamics. If you use AI to do things you couldn't have done on your own, you're copying off someone else's homework and the real risk is that you don't know who you're copying from, but they probably do.

sulam 20 minutes ago | parent

How do you copy code from Office? Is the source code public?

snowwrestler 1 hour ago | parent

A vector against a standardized XML+ZIP document format?

dofm 1 hour ago | parent

‘’ <—— li’l Dr Evil air quotes to put around ‘standardized’ ;-)

If anything it’s DOCX itself that was the vector!

rolph 57 minutes ago | parent

IP is not the only issue. BTW this discussion is being chilled so now an exercise in abusive DV harvesting.

Understanding DOCX Malware and Hidden Threats

https://cloudmersive.com/article/Understanding-DOCX-Malware-...

Hackers using Weaponized Office Document to Exploit Windows Search RCE

https://cybersecuritynews.com/office-document-to-exploit-win...

anenefan 2 hours ago | parent

This link should be enough to work out the relevant links. [1]

I would guess that they have lost access to a resource lately ... I've read there's a lot of that going around atm.

[1] https://news.ycombinator.com/threads?id=thisisjedr

refulgentis 55 minutes ago | parent

I clicked through and browsed the comments and clicked links. It does appear the links are not working as described. Is there something you’re throwing and I’m not catching? :)

anenefan 33 minutes ago | parent

The relevant non functional links should be listed in the comments. The OP was complaining they were not able to include links directly. I'm not sure about [1] [2] [3] in the main post but the show hn [A] or [B] thread should afaik have not been an issue.

[A] https://news.ycombinator.com/item?id=46947229

[B] https://news.ycombinator.com/item?id=48228411

[1] https://docx-editor.dev/

[2] https://github.com/eigenpal/docx-js-editor

[3] https://github.com/eigenpal/docx-editor

Edit for additional show hn thread

gcanyon 14 minutes ago | parent

Ah, good call, I should have included the threads, thanks! I tried several variants of the GitHub URL and the main web site and got errors until I cut it back to what I posted and rushed out of work to have dinner with my wife.

darkteflon 1 hour ago | parent

Oh man, that’s disappointing. We implemented this in a test environment and have been hammering on it. Would love to know what’s going on as it solves a real pain point for us.

d3Xt3r 1 hour ago | parent

There's plenty of open-source docx editors though? What makes eigenpal's editor so special?

darkteflon 1 hour ago | parent

Could you recommend your picks in the space?

Edit (since I can’t seem to reply directly) - to the commenter suggesting LibreOffice below: quite different things. This was a library for implementing reasonably high fidelity docx viewing / editing in the browser.

rjsw 1 hour ago | parent

What is wrong with LibreOffice?

jubilanti 1 hour ago | parent

Hahahahahahahahahahahahahahahaha hahahahahahahaha

How long do you have?

nosioptar 43 minutes ago | parent

The classic UI text is too damned small. You cannot easily increase it last time I checked.

gcanyon 9 minutes ago | parent

I’m in exactly the same boat. I’ll have to look at some of the suggestions here

fsckboy 1 hour ago | parent

what was that item from just a day or so ago where an opensource project had said they developed using AI, and a developer said "take it down, you copied it from us"

I thought of it because this project said they used AI

( https://news.ycombinator.com/item?id=48085993 )

bratao 1 hour ago | parent

Not affiliated but I been using https://github.com/superdoc-dev/superdoc and it is very good and compatible with many docx features.

tekacs 1 hour ago | parent

The original source (matching the latest published NPM version) is still at https://github.com/mhurhangee/patrick/tree/main/packages and Apache-2.0, so I imagine that someone who'd like a copy can pick it up from there.

notRobot 4 minutes ago | parent

@mhurhangee also appears to have a mirror of the missing github repo here: https://github.com/mhurhangee/docx-editor

nathanstitt 1 hour ago | parent

Also not affiliated but my open-source tinycld uses docx as the backend storage for its text package. Supports _most_ of the features (including comments and suggestions) but is still very young. It has a golang backend that reads/writes docx and translates to YJS that the editor reads for multi-user access. Has web/iOS/Android support.

I found docx to be a very well documented format and a surprisingly good fit for this.

https://tinycld.org has a live demo