Vista has speech recognition hole

Capt'n Midnight

http://news.bbc.co.uk/2/hi/technology/6320865.stm

In one scenario outlined by users an MP3 file of voice instructions was used to tell the PC to delete documents.

Microsoft said the exploit was "technically possible" but there was no need to worry.

Is speech recognition only through the microphone ??

"Format, page, size, A4. No make it C Four, Oh yeah , Format C, Fou.. NOOOO! "

aidan_walsh

Love this blog post in particular

Quite some time ago I’ve heard a computer joke:

Bill Gates was demonstrating his latest speech-recognition software. He was just about ready to start the demonstration and asked everyone in the room to quiet down.

Just then someone in the back of the room yelled, "Format C: Return."

Someone else chimed in: "Yes, Return!"

Unfortunately, the software worked.

I thought it to be hilarious, though highly improbable. Certainly anyone designing this kind of system would introduce some sort of protection against this kind of “accidents”, right?...

Well, today I’ve read the following:

Capt'n Midnight

Actually you don't even need to send an mp3, just a plain text web page or email might do it.

http://www.microsoft.com/enable/training/windowsvista/narrator.aspx

Narrator is a text-to-speech program (or basic screen reader) that is built into Windows Vista. Narrator reads menus without leaving the active window. Individuals who use Narrator will also find a more pleasant, natural sounding voice in Windows Vista.

There are two ways to start Narrator:
* Start Narrator from Quick Access to common tools for use in the current session, or
* Turn on Narrator so that it starts automatically each time you log on.

aidan_walsh

Of course, all this assumes that you have the Speech Control on, a microphone attached and pointed generally towards the speakers, and the volume of the speakers at a decent level.

DonkeyStyle \o/

I'd say they could work something out with echo cancellation... or at least require you to set a custom 'attention' word before commands are accepted... like 'do' or 'open' or 'begin' that some random malicious twat wouldn't know or be able to rely on. (but let's face it, every Star Trek nerd would want to use 'computer' )

I half-wonder if this isn't some sneaky marketing ploy on Microsofts behalf - wow, Vistas new voice recognition is so powerful that random strangers can now take full control of your PC without having to sit down for five hours training their voice for it! (something I grew tired of very quickly in XP)
I can't see this hurting sales, and seems to be a bit of an overblown non-issue... very convenient I must say.

Martyr

LOL
that has to be the "funniest exploit" i've heard of yet..it sounds more like a joke.