[IP] Re: Best. Vista. exploit. ever!

[David Farber <dave@farber.net>]

Begin forwarded message:

From: Ross Stapleton-Gray <ross@stapleton-gray.com>
Date: February 9, 2007 2:04:24 PM EST
To: dave@farber.net, Ethan Ackerman <eackerma@u.washington.edu>
Subject: Re: [IP] Best. Vista. exploit. ever!

At 09:30 AM 2/9/2007, David Farber wrote:
> The SANS blog has a nice summary of an innovative exploit in MS
> Vista's speech recognition implementation - a malicious audio file can
> be used to give user-level control.  It does so not in the usual
> buffer overflow or mileading header corruptions, but by actual voice
> recognition of spoken scripting commands.

I'd like to nominate "Soupy Sales Attack" as an identifier for this  
exploit, evoking the comedian's famous stunt, where he asked kids  
watching his show to raid their parents' purses and wallets: http:// 
www.snopes.com/radiotv/tv/soupy1.htm

Ross



----
Ross Stapleton-Gray, Ph.D.
Stapleton-Gray & Associates, Inc.
http://www.stapleton-gray.com
http://www.sortingdoor.com






-------------------------------------------