[Dailydave] Vista speach recognition

[Ken Buchanan]

>From MS:
"Of course this would be heard and the actions taken would be visible
to the user if they were in front of the PC during the attempted
exploitation."

Bah.  I bet some degree of stealth could be worked into this if
someone tried hard enough.  The most obvious method won't work:
emitting sound outside the range of human hearing.  The intersection
of the sets of frequencies that a normal microphone will detect, a
normal speaker will emit, and human ears won't detect is null.

There are other avenues that would have to be explored experimentally.
 How much can you speed up or slow down the words and the recognition
still work?  What about overlaying the commands on music?  Can we take
advantage of psychoacoustics to disguise some of the phonemes, so an
unalert user might not notice their presence?

I just wouldn't assume this is inherently non-stealthy.

- Ken


On 2/1/07, Juha-Matti Laurio <juha-matti.laurio at netti.fi> wrote:
> Microsoft has released its response at MSRC Blog now.
>
> Link:
> http://blogs.technet.com/msrc/archive/2007/01/31/issue-regarding-windows-vista-speech-recognition.aspx
>
> - Juha-Matti
> _______________________________________________
> Dailydave mailing list
> Dailydave at lists.immunitysec.com
> http://lists.immunitysec.com/mailman/listinfo/dailydave
>