Dailydave: Re: Vista speach recognition

[christian void <cvoid () morphine com>]

On Tue, 30 Jan 2007, Sebastian Krahmer wrote:

> I am in no way an Win expert but recently I read that
> vista will support commands as they are spoken by the user.
> What about websites where the browser is playing wav or similar
> audio files upon visiting? what if they contain spoken
> commands? An exploit audio file which speaks something like
> 'open shell' would be cool, eh?
That was a problem about 15 years ago when Apple introduced similar 
functionality. We realized quickly that we needed to enable thier "guard" 
feature that required a keyword be spoken before commands. That was, of 
course, after numerous funny scenarios where someone would walk by and say 
"SHUTDOWN".

I'm sure gating of the audio input to prevent feedback would preclude the 
use of audio files inadvertently entering commands. Probably some 
interesting ways around that in the same vein as masking 2.6k with white 
noise. Something worth playing around with. Could be fun.

-- 
christian void
cvoid () morphine com
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave