Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

MS Office secretly connects to my Mac and scans my activity. How??? Security hole? Exploitable by hackers?

I have a strange problem. All by itself it's not so serious, but it concerns me that it reveals a security hole which can be exploited by hackers.


I may be over-reacting, so any reassurance or explanation would be appreciated.


Here's the situation:


I have a MacBook Pro running OSX 10.6.5. I also have a new MacBook Air also running 10.6.5. I recently used Migration Assistant to move all my applications from the MacBook Pro to the MacBook Air. The migration worked fine with one very troubling exception.


One of the applications that got migrated was MS Office 2008 (MSWord, Excel, etc.). When I just had my MacBook Pro, MS Office worked fine. Also, now, if my MacBook Pro is turned off and I'm just using my Air, MS Office again works fine.


HOWEVER...if I have my MacBook Pro open and running MS Office on it, and then I simultaneously open my Air and try to launch MS Office, I get an error message that says


"Microsoft Office 2008 for Mac cannot start because Microsoft Office is already in use.

An office program is being used by Apple Mac. Your installation exceeds the number of installations permitted by the license agreement."


However, if I then "Quit" MS Office on the Pro, and then try to launch it on the Air, I don't get the error message, and it works as normal. The same thing happens if I switch computers -- if it's running on the Air first, then I can't launch it on the Pro. Basically, only one of the computers can run MS Office at any one time.


Now, the issue about the MS license agreement is not what concerns me -- I guess the version of MS Office I bought back in 2008 was only supposed to be installed on one single computer, and never migrated to a new computer (I eventually plan to use the Air full time and retire the Pro). I'm probably going to get a newer version of MS Office eventually anyway, and also I almost never use both computers at the same time, so I'm not worried about being unable to use MS Office on both computes simultaneously. No, what worries me is this:


How does MS Office on one computer even know that my other computer is running and has MS Office open?


I'm not an expert on networks and sharing and connectivity and all that, so excuse me if I use inaccurate terminology, but...:


Both computers connect via AirPort to a cable modem and thus share the same wifi hotspot to connect to the internet.


But as far as I can tell, the two computers are not "connected" to each other. In the System Preferences for both computers, in the "Sharing" panel, all File Sharing is off. Also, none of the sharing boxes are checked.


Neither computer shows the hard drive of the other on its Desktop. If I wanted to, I could use Finder's "Go" menu, choose "Connect to server," then "Browse," then find the other computer, double-click on it, type in the admin password, and then connect the two computers. But I haven't done that, and MS Office is able to see what the other comoputer is doing, even when they aren't connected in any way (as far as I can tell).


I find this pretty disturbing. How in the world does the MS Office on one computer even know that the other computer exists? Furthermore, how does it know that the other computer is on and running? And lastly and more importantly, how does it know which programs are running on the other computer?


One extra detail: in order to try to diagnose this odd behavior, I installed a program called "Little Snitch" which monitors all network activity and notifies the user whenever any malware programs or other sneaky behind-the-scens apps try to send data over your connection without your knowledge. Little Snitch seems to work great but when I test the problem after installing it, Little Snitch did not even detect or report that MS Office was doing any surreptitious network snooping. So whatever MS Office is doing, it's doing it pretty sneakily.


Here is my worry: Could a hacker somehow exploit this capability of MS Office to monitor activity on my computer without my being aware of it? Or could someone re-adapt this snooping code from MS Office for more nefarious purposes?


Or am I completely misapprehending the situation somehow?


Any reassurance or explanation would be greatly appreciated! Thanks.

15" MacBookPro, Mac OS X (10.6.5)

Posted on Jun 1, 2011 11:29 AM

Reply
23 replies

Jun 1, 2011 11:40 AM in response to Tuffy Nicolas

Nothing wrong, Office is just preventing you from running software with the same serial number on two machines at the same time. Adobe and Quark have been doing that for well over a decade.


As long as the software can see another computer on your network running the same software, using the same product activation key, you will get that message.


The Home/Student version has multiple product keys. The full version, which includes Outlook, is a single license only.

Jun 1, 2011 11:48 AM in response to Kurt Lang

As long as the software can see another computer on your network running the same software, using the same product activation key, you will get that message.


But my question is: How does the software do that?


And if Microsoft has the ability to write code that can not only detect what software is running on all nearby computers, but even what serial numbers they use, then what's preventing less ethical coders from deploying similar but more sinister malware with the same capability?


Now I have the fear that if I'm using a wifi hotspot in a cafe or wherever, someone else with hacking skills on that same hotspot could basically see what I'm doing on my computer, without my knowledge.

Jun 1, 2011 12:02 PM in response to Tuffy Nicolas

But my question is: How does the software do that?

It scans the local network for computers trying to "share" software that is only supposed to be licensed for one computer. I can't give you a technical answer, I can just tell you that's what it's doing.

then what's preventing less ethical coders from deploying similar but more sinister malware with the same capability?

Nothing. Any vendor of any software, from a one person shareware or freeware app to a company the size of Apple, Microsoft or Adobe could sneak in damaging code. Any company that wants to stay in business though would never allow it.


In a typical software company (particularly larger ones), you have not only the people who write the code, but also system analysts who review the code looking for flaws or anything else that shouldn't be there.

Now I have the fear that if I'm using a wifi hotspot in a cafe or wherever, someone else with hacking skills on that same hotspot could basically see what I'm doing on my computer, without my knowledge.

The software to pry (they hope undetected) into other folks' computers on an open network like that has been around for years. That's why you at least need to have your firewall enabled when using a wifi hotspot.

Jun 1, 2011 12:20 PM in response to Kurt Lang

That's why you at least need to have your firewall enabled when using a wifi hotspot.


Hmmm...thanks for alerting me to that feature! I didn't even know, until you mentioned it, that there even was a "firewall" setting in the System Preferences! Learn something new every day.


I have now turned on my firewall in System Preferences > Security > Firewall. But now I have two follow-up questions:


Does having the firewall turned on slow down my Internet connection in any way?

...and...

Will turning on the firewall setting prevent me from connecting to my printers, unless I first turn the firewall off?

Jun 1, 2011 12:26 PM in response to WZZZ

Linc Davis wrote:

By registering a Bonjour service that other copies of Office listen for on the local network. The same way you can tell what file servers and printers there are. It's not a security hole.


WZZZ wrote:

You can turn off Bonjour advertising, if you feel up to doing some minor editing.

http://support.apple.com/kb/HT3789


Thanks! That explains it, I suppose, though it is a bit over my head.


That Bonjour editing suggestion from WZZZ undoubtedly works, I'm sure, but I'm a little too nervous to actually do it -- too many warnings about how one minor boo-boo will make my Mac unbootable!

Jun 1, 2011 1:03 PM in response to Linc Davis

or (preferably) I'd get rid of Office altogether.

Nothing against you in particular, Linc, but I'm really tired of seeing this hatred of anything Microsoft. There is nothing wrong with Office. Millions of users on both Mac and Windows use it daily. In some cases, they must since free alternatives like Open Office can't replicate every feature.

Jun 1, 2011 1:18 PM in response to Kurt Lang

Kurt Lang wrote:

There is nothing wrong with Office. Millions of users on both Mac and Windows use it daily. In some cases, they must since free alternatives like Open Office can't replicate every feature.

Count me in that "must" category: I don't particularly like MSWord's interface or idiosycratic annoyances, but it is the "industry standard" for my day job and I need to use it to create files that can be read by everyone in the industry with no problems. Also, MSWord is good for creating and previewing printed documents that are just text. This control over the printed page (as opposed to the on-screen experience) is the other reason why I "like" using MSWord -- other programs like TextEdit just don't have the same printed-page capabilities.

Sep 23, 2012 12:01 PM in response to mgrigsby

mgrigsby wrote:


Does anyone know..... if you're not connected to the internet, how can Microsoft Office "talk" to another computer whre it's installed?

If you're not connected via wi-fi or ethernet, then your computer can't share information. End of story.


[there are ways to connect via other connections, but let's assume you're not doing anything very unusual]

Sep 23, 2012 12:07 PM in response to Kurt Lang

Kurt Lang wrote:


or (preferably) I'd get rid of Office altogether.

Nothing against you in particular, Linc, but I'm really tired of seeing this hatred of anything Microsoft. There is nothing wrong with Office. Millions of users on both Mac and Windows use it daily. In some cases, they must since free alternatives like Open Office can't replicate every feature.

Really? My desktop Mac Pro currently has a copy of MS Word than can neither copy & paste nor print. Wiping preferences, restoring and reinstalling have done nothing to help. I'll grant you that Microsoft's installations aren't quite as bizarrely weedy as Adobe's, but giant-corporation software is almost always an enormous pain to troubleshoot, compared to just about anything else.


Also, since when was necessity -- having to use Office -- a reason not to hate the publisher? That's ridiculous.


[my workaround of using my laptop every time I need to access MS Word to make a PDF is only slightly less painful than the alternative of a fresh system install -- solely to humour Word -- would be]

MS Office secretly connects to my Mac and scans my activity. How??? Security hole? Exploitable by hackers?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.