BBC: Windows Vista "has speech recognition hole”

The BBC is reporting how a ‘hole’ in the way Windows Vista works could allow data deletion commands to be issued by an intruder. Microsoft replied that yes, this was ‘technically possible’.

Now, forgive my cynicism, but this all sounds a little silly. The concern is that if an mp3 audio file of destructive commands was sent to a user, and that user chose to play it whilst their microphone and speakers were turned up high, the computer would be tricked into accepting the words picked up by the microphone as voice commands. So if the mp3 shouted “Delete All Files!”, or something to that end, chaos would ensue.

Now, let’s address the required factors for this to take place. First, the user has to accept an mp3 file, be that from a Windows Live Messenger contact, via e mail or it being planted on his or her PC manually. Second, they have to have their microphone on and their speakers turned up loud enough (which would cause horrible levels of feedback, and isn’t standard practice at all) to ‘loop back’ the audio. Of course, the instigator of this terrible crime would have to know this, too. Third, the user would have to listen to the entire mp3, loudly, whilst watching his or her windows fly around and files getting moved to the Recycle Bin… and not try to stop it by (gasp) stopping or pausing the mp3. There are so many unlikely factors involved in getting this ‘hole’ to work, that it’s no more realistic to suggest that your data might be lost should an axe-wielding ferret go nuts on your new Windows Vista laptop.

The bottom line; this is just one more unnecessary worry for users of Windows Vista to scare themselves into not upgrading over. The chance that you, or anyone else in the world for that matter, could be affected by this ‘hole’ is very, very slim.