Slashdot Mirror
Spoken Commands Crash Bank Phone Lines
mask.of.sanity writes "A security researcher has demonstrated a series of attacks that are capable of disabling touch tone and voice activated phone systems, forcing them to disclose sensitive information. The commands can be keyed in using touchtones or even using the human voice. In one test, a phone system run by an unnamed Indian bank had dumped customer PINs. In another, a buffer overflow was triggered against a back-end database. Other attacks can be used to crash phone systems outright."
I hate those automated prompts.
How is the turing test doing for social engineering an automated system?
Maybe the system commited suicide after listening to those humans and just decided it was not woth it anymore.
To hear the PINs of our other customers, please press 1, or say "yes" now.
I'm sorry, but your opinion seems to be wrong.
Wonder of something like this happened.
If you have the knack for it, whenever you encounter and IVR is to repeatedly scream a phrase at it, something like 'agent'. Good systems recognize the word and put you through to a human post haste. Shit systems, which are the predominant type, have something like a 30 or 60 second timeout before requiring human help.
I'm not a programmer and I know what a buffer overflow is...
It's when you use too much polishing compound on your buffer and it squirts out everywhere and ruins the paint on the car, right?
Do not look into laser with remaining eye.
DNWTFV...
I'm sorry, but "shower scene" and "Dilbert" do not belong anywhere near each other.
I had an involuntary mental image that it'd be like the shower scene from Starship Troopers but with the Dilbert characters, and then I threw up a little bit...
Do not look into laser with remaining eye.
Meh, why not?
It fulfills the car-analogy requirement for this article at least.
No colour or religion ever stopped the bullet from a gun
Ever contemplate how much pizza you really eat, by volume?
Let "a" be the thickness of the crust, and let "z" be the radius.
So, the volume of your slice, depending on how it's cut, is a fraction of pi*z*z*a.
Do not look into laser with remaining eye.
"Thank you for calling Mega Bank. Please say 'Customer Service' or 'Loan Application'."
"SELECT password FROM members"
"It sounds like you're trying to hack our system. Please hold while I access that data."
The article indicates that the attack was done by speaking attack commands.
Attack commands?
"DIE AND BURN IN HELL, YOU STUPID FUCKING PIECE OF SHIT VOICEMAIL SYSTEM!"
"Okay. I will die now."
*sound of distant explosion*
"...huh. Cool. I didn't think it'd be that easy."
Press one if you'd like to see those links again.
"I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)