Spoken Commands Crash Bank Phone Lines 178
mask.of.sanity writes "A security researcher has demonstrated a series of attacks that are capable of disabling touch tone and voice activated phone systems, forcing them to disclose sensitive information. The commands can be keyed in using touchtones or even using the human voice. In one test, a phone system run by an unnamed Indian bank had dumped customer PINs. In another, a buffer overflow was triggered against a back-end database. Other attacks can be used to crash phone systems outright."
Good (Score:5, Funny)
I hate those automated prompts.
Social engineering (Score:5, Funny)
How is the turing test doing for social engineering an automated system?
Maybe the system commited suicide after listening to those humans and just decided it was not woth it anymore.
Would you like to hear other people's PINs? (Score:5, Funny)
To hear the PINs of our other customers, please press 1, or say "yes" now.
Oblig (Score:3, Funny)
One trick (Score:4, Funny)
Re:What? (Score:5, Funny)
It's when you use too much polishing compound on your buffer and it squirts out everywhere and ruins the paint on the car, right?
Re:Dilbert would be proud (Score:5, Funny)
I'm sorry, but "shower scene" and "Dilbert" do not belong anywhere near each other.
I had an involuntary mental image that it'd be like the shower scene from Starship Troopers but with the Dilbert characters, and then I threw up a little bit...
Re:What? (Score:5, Funny)
Meh, why not?
It fulfills the car-analogy requirement for this article at least.
Re:One trick (Score:4, Funny)
Re:Good (Score:5, Funny)
Press SQRT(-1) if this annoys you.
Re:What? (Score:5, Funny)
Let "a" be the thickness of the crust, and let "z" be the radius.
So, the volume of your slice, depending on how it's cut, is a fraction of pi*z*z*a.
Re:Would you like to hear other people's PINs? (Score:5, Funny)
0000
0001
0002
:
9999
Re:SQL Injection via voice? (Score:5, Funny)
"Thank you for calling Mega Bank. Please say 'Customer Service' or 'Loan Application'."
"SELECT password FROM members"
"It sounds like you're trying to hack our system. Please hold while I access that data."
Re:SQL Injection via voice? (Score:3, Funny)
The article indicates that the attack was done by speaking attack commands.
Attack commands?
"DIE AND BURN IN HELL, YOU STUPID FUCKING PIECE OF SHIT VOICEMAIL SYSTEM!"
"Okay. I will die now."
*sound of distant explosion*
"...huh. Cool. I didn't think it'd be that easy."
Re:What? (Score:3, Funny)
Press one if you'd like to see those links again.
Re:Good (Score:4, Funny)
See, when you type swordfish, it shows to us as *******