Hey, I like security as much as the next person. (Actually, in the spirit of true confessions: I probably like it a LOT more than most people. I'm constantly reading about, and frequently trying my hand at various obscure scenarios.) So, when I saw an article entitled "Vista Speech Recognition Hole", I instantly thought: "uh oh...".
Then I read the details. The 'slpoit? Some nasty person might tell your computer to "shutdown", or "copy", or "email browsing history to mommy", or "activate clippy" (you know, something truly HORRIBLE).
If that's the worry, then I'd suggest that Vista also has security holes in the form of a mouse and keyboard - especially if a hypnotist is nearby.
Of course, the article goes on to explain that an exploit could be crafted by (no, not a hypnotist) a hacker who recorded voice commands, that could then be played on a target computers speakers, picked up by the machine's microphone, and carried out by the unwitting machine. (Silly machines - how are they supposed to know that once a user logs in they could either a) fall prey to a hypnotist, or b) be replaced by someone else sitting at the keyboard or c) be controlled by a nasty hacker issuing voice commands).
I say: MS should be applauded for making it possible for even non technical people to be able to make viruses. Now any idiot with a microphone can create their own set of instructions to be released upon the world. (Well, maybe not any idiot - only specialized idiots smart enough to make sure that they turn OFF their microphone before replaying their 'viruses' for testing purposes... "Damnit .... nooooooo!!!!")
My favorite part of the article: "The flaw is being regarded by many as a non issue." Uh yeah... I'm way more worried about the possibility of my rechargeable mouse exploding and getting battery acid on my LCDs than I am afraid of a rogue .mp3 taking control of my machine.
But hey, Vista officially launched this week... so it's only natural that the media should try to find some headline to somehow make it look insecure.... (Honestly, do reporters hope we'll all just sit around reading headlines and saying "Scandalous!"?)
Oh man, I about spit soda all over my monitor reading this. So funny.
PS. I have a cool mp3 you should listen to. Only, you can't use headphones ... ;)
Posted by: Jon Sharp | February 06, 2007 at 08:07 AM