From: christian void (cvoidmorphine.com)
Date: Tue Jan 30 2007 - 15:20:27 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, 30 Jan 2007, Sebastian Krahmer wrote:

> I am in no way an Win expert but recently I read that
> vista will support commands as they are spoken by the user.
> What about websites where the browser is playing wav or similar
> audio files upon visiting? what if they contain spoken
> commands? An exploit audio file which speaks something like
> 'open shell' would be cool, eh?

That was a problem about 15 years ago when Apple introduced similar
functionality. We realized quickly that we needed to enable thier "guard"
feature that required a keyword be spoken before commands. That was, of
course, after numerous funny scenarios where someone would walk by and say
"SHUTDOWN".

I'm sure gating of the audio input to prevent feedback would preclude the
use of audio files inadvertently entering commands. Probably some
interesting ways around that in the same vein as masking 2.6k with white
noise. Something worth playing around with. Could be fun.

--
christian void
cvoidmorphine.com
_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]