Dailydave: Re: Vista speach recognition

["George Ou" <george_ou () lanarchitect net>]

Very good question Sebastian.  One would think that the OS should know what
audio came out of itself and what audio came in from a fresh external source
like the Microphone just for the elimination of a nasty looping feedback
problem.  If you permitted sound from the computer itself to enter back in
to the system and get amplified again by the Mic, you're looking at nasty
feedback issues.

But it's still very possible that the OS will pick up some audio from sound
playback.  I've worked with Vista sound commands and dictation and it does
require you to calibrate the thing to your spoken voice.  I didn't try to
have someone near me speak a command but if it's a similar voice it might
work.  I guess I could run a test where I record some commands with my voice
and then play it back really loud with voice command turned on to see if I
can fool the thing in to running the commands I want.  I'll let you know how
it turns out.


George


-----Original Message-----
From: dailydave-bounces () lists immunitysec com
[mailto:dailydave-bounces () lists immunitysec com] On Behalf Of Sebastian
Krahmer
Sent: Tuesday, January 30, 2007 6:42 AM
To: dailydave () lists immunitysec com
Subject: [Dailydave] Vista speach recognition


Hi,

I am in no way an Win expert but recently I read that vista will support
commands as they are spoken by the user.
What about websites where the browser is playing wav or similar audio files
upon visiting? what if they contain spoken commands? An exploit audio file
which speaks something like 'open shell' would be cool, eh?

Sebastian


--
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer () suse de - SuSE Security Team
~

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave