Add an image
Add a link
February 02, 2007 -- 9:15 AM
posted by Par
Beck, further to that Vista exploit you were describing to me yesterday, diveintomark's take on the issue. First off, the exploit itself:
An issue has been identified publicly where an attacker could use the speech recognition capability of Windows Vista to cause the system to take undesired actions. … The exploit scenario would involve the speech recognition feature picking up commands through the microphone such as “copyâ€, “deleteâ€, “shutdownâ€, etc. and acting on them. These commands would be coming from an audio file that is being played through the speakers.Mark's additional caveats for the exploit to work (beyond of course the unlikely event of having both a microphone and speakers) are insightful as well. To wit:
...
In order for the attack to be successful, the targeted system would need to have the speech recognition feature previously activated and configured. Additionally the system would need to have speakers and a microphone installed and turned on. … There are also additional barriers that would make an attack difficult including speaker and microphone placement, microphone feedback, and the clarity of the dictation.
- Your computer must be turned on. It’s amazing how often people need to be reminded of this.
- If you are currently experiencing a Blue Screen Of Death, you are not vulnerable to this exploit. Microsoft’s patented Blue Screen Of Death, built into all recent versions of Windows, protects you from security exploits for as long as it is active. Warning: if you reboot your computer, you will no longer be protected by the Blue Screen Of Death.
- You need to be on a planet with atmosphere, and not, say, drifting in space. Sound doesn’t travel in space. Everybody knows that.
Mark wonders, as I did when I first heard about this hole, why the speech recognition software can't just check the input it's getting against audio output from the system. Apparently the security hole was just too obvious.
February 01, 2007 -- 11:56 PM
posted by Par
For the record, for tonight's game, the Oilers essentially rolled three lines in the third period (Stoll injured, Thoreson and Stortini for all intents and purposes benched) for the second game of a back-to-back set. In addition, with the Oilers only a goal behind, Ryan Smyth did not play in the last three minutes of the game, whereas Joffrey Lupul was on the ice for nearly every second he didn't spend in the penalty box in the last three minutes of the game.
Is there a reason why Lupul was on the ice for so much of the end of the game??
February 01, 2007 -- 7:23 PM
posted by Al
Actually Tay maybe you should get a better wacom board. This is your livelyhood after all, it makes no sense for a hobbyist like me to get an intuos, but as for you I don't see a reason why not. All the graphic designers at my company have them and they all say it is far superior to the Graphire. Shortcut keys to move the screen around, much larger work area, well you pretty much know what to get with that tablet.
February 01, 2007 -- 7:18 PM
posted by P
You should have bought an extra stylus in the expectation that something will go wrong with the current stylus. Tsk.
February 01, 2007 -- 3:41 PM
posted by Jere
Well I guess that's what you get for trying to shove things up your stylus hole.
February 01, 2007 -- 8:48 AM
posted by Par
Isn't it more like breaking a button on your shirt and then tearing your suit apart before you find the spare button on the inside of the shirt?
