Speech recognition vulnerability in Vista
Garg
Purveyor of Lincoln Nightmares Icrontian
Windows Vista features enhanced speech recognition capability that can manipulate files on your computer. That gives you the power to delete files without raising a finger. However, what if you had speech recognition enabled, and you browsed onto a hostile web site that plays an audio command through your speakers, asking it to delete a file? It could follow that up by emptying your Recycle Bin before you can retrieve it.
The BBC reports that some Vista users have already tested this exploit and have gotten it to work. Microsoft acknowledges the flaw, but points out that it would require carefully dictated files and correct speaker and microphone placement. On top of that, the user would likely be in the room to hear the command being played through the speakers. Still, Microsoft is investigating the exploit.
The BBC reports that some Vista users have already tested this exploit and have gotten it to work. Microsoft acknowledges the flaw, but points out that it would require carefully dictated files and correct speaker and microphone placement. On top of that, the user would likely be in the room to hear the command being played through the speakers. Still, Microsoft is investigating the exploit.
0
Comments
The only thing they could do is disable this option OR disactivate some functionnalities like being able to DELETE with a voice command.
I dunno how it works but i think the 2nd option will be the solution to this problem.
Like they said tho it would take some luck to do real damage to a computer with a flaw like that.