Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / vista shout hack [speech vunerbility]

Author
Message
indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 2nd Feb 2007 12:53 Edited at: 2nd Feb 2007 12:53
Link
Basically if that said user account allows the speech activation and accepts a download the said victims computer could be used to shout at the recipient via the speech components

classic weird hack for the start of 2007.


http://www.pcworld.com/article/id,128737-c,vistalonghorn/article.html

Back to top
Profile PM Email
JerBil
20
Years of Service
User Offline
Joined: 8th May 2004
Location: Somewhere along the Z axis...
Posted: 2nd Feb 2007 13:03
Link
Interesting, but...

"Successful attackers would need to be physically present at the machine, or figure out a way to trick the computer's owner to download and play an audio recording of the malicious commands. Even then, the commands would somehow have to be issued without attracting the attention of the computer's owner."

Yes, there is a strange person at my computer, talking to it.
I did not see or hear anything when it was hacked...

Ad Astra Per Asper
Back to top
Profile PM Email
indi
22
Years of Service
User Offline
Joined: 26th Aug 2002
Location: Earth, Brisbane, Australia
Posted: 2nd Feb 2007 13:11
Link
yeah its a strange one indeed.

Back to top
Profile PM Email
SirFire
19
Years of Service
User Offline
Joined: 4th Apr 2005
Location: North America
Posted: 2nd Feb 2007 22:30
Link
I stopped using speech recognition, it was pretty cool until people in the house discovered they could pwn me by walking by my door and yelling "close window!".

_____________________
Windows Vista: Just say no.
Back to top
Profile PM Website
Dave J
Retired Moderator
21
Years of Service
User Offline
Joined: 11th Feb 2003
Location: Secret Military Pub, Down Under
Posted: 3rd Feb 2007 01:55
Link
That doesn't even qualify as a hack because not only do they need their microphone, speaker and voice rec enabled, they also have to download an audio recording and play it. Hence, they'll be listening to the 'malicious file' running commands (at which point, they can simply close it). Unbelievable.

One of the replies to that article is classic:

Quote: "I found a flaw with Vista myself. If I am logged into my machine and someone comes up behind me they could bash me over the head and then run commands successfully on my PC."



"Computers are useless, they can only give you answers."
Back to top
Profile PM Email
Agent Dink
20
Years of Service
User Offline
Joined: 30th Mar 2004
Location:
Posted: 3rd Feb 2007 07:11
Link
Quote: ""I found a flaw with Vista myself. If I am logged into my machine and someone comes up behind me they could bash me over the head and then run commands successfully on my PC.""


Apparently no one's computer is safe these days!



Sometimes the only way over a wall is to pile up enough bodies to climb over - Dave W.
Back to top
Profile PM
GatorHex
19
Years of Service
User Offline
Joined: 5th Apr 2005
Location: Gunchester, UK
Posted: 3rd Feb 2007 10:14
Link
Those stupid pop under web adverts for smileys scare the crap out of me when suddenly I hear a strange voice saying "hello!".

It don't take much imagination to assume a hacker could make a web page that does the same but instead says "Format drive C:...Yes im sure!" Muhahaha

http://www.KumKie.com http://bulldog.servegame.com
Back to top
Profile PM Website
Fallout
22
Years of Service
User Offline
Joined: 1st Sep 2002
Location: Basingstoke, England
Posted: 3rd Feb 2007 11:16
Link
Classic. I'm sure Vista will be riddled with exploits, but yeah, that's a bit lame.


Back to top
Profile PM
Pricey
21
Years of Service
User Offline
Joined: 22nd Feb 2003
Location:
Posted: 3rd Feb 2007 22:31
Link
well couldn't you just make a site that simply automatically streams the sound file with the commands through your speakers?

http://forum.thegamecreators.com/?m=forum_view&t=97191&b=32
God Of Thunder DEMO
Back to top
Profile PM Email
Chris K
21
Years of Service
User Offline
Joined: 7th Oct 2003
Location: Lake Hylia
Posted: 3rd Feb 2007 23:10
Link
Doesn't XP have voice recognition? Oh wait no one cares.

-= Out here in the fields, I fight for my meals =-
Back to top
Profile PM
_Nemesis_
21
Years of Service
User Offline
Joined: 9th Nov 2003
Location: Liverpool, UK
Posted: 4th Feb 2007 02:36
Link
That exploit made me laugh. I'd be gutted.

Quote: "Doesn't XP have voice recognition? Oh wait no one cares.
"


Aye, XPs is quite good and accurate - but limited. Vista's is much more widespread.

[url="http://www.devhat.net"]www.devhat.net[/url] :: Devhat IRC Network.
Current Project: ASP Content Management System
Back to top
Profile PM Email
Dr Manette
18
Years of Service
User Offline
Joined: 17th Jan 2006
Location: BioFox Games hq
Posted: 4th Feb 2007 03:04
Link
Good ol' Microsoft.

Bio Fox...four guys, one computer, games like nobody's business. Join our forum: http://www.biofox.aceboard.com
Back to top
Profile PM Email Website
Back to top

Login to post a reply

Server time is: 2024-11-18 05:39:13
Your offset time is: 2024-11-18 05:39:13