Slashdot Mirror
Spoken Commands Crash Bank Phone Lines
mask.of.sanity writes "A security researcher has demonstrated a series of attacks that are capable of disabling touch tone and voice activated phone systems, forcing them to disclose sensitive information. The commands can be keyed in using touchtones or even using the human voice. In one test, a phone system run by an unnamed Indian bank had dumped customer PINs. In another, a buffer overflow was triggered against a back-end database. Other attacks can be used to crash phone systems outright."
I hate those automated prompts.
How is the turing test doing for social engineering an automated system?
Maybe the system commited suicide after listening to those humans and just decided it was not woth it anymore.
To hear the PINs of our other customers, please press 1, or say "yes" now.
I'm sorry, but your opinion seems to be wrong.
I'm not a programmer and I know what a buffer overflow is...
It's when you use too much polishing compound on your buffer and it squirts out everywhere and ruins the paint on the car, right?
Do not look into laser with remaining eye.
DNWTFV...
I'm sorry, but "shower scene" and "Dilbert" do not belong anywhere near each other.
I had an involuntary mental image that it'd be like the shower scene from Starship Troopers but with the Dilbert characters, and then I threw up a little bit...
Do not look into laser with remaining eye.
Meh, why not?
It fulfills the car-analogy requirement for this article at least.
No colour or religion ever stopped the bullet from a gun
Ever contemplate how much pizza you really eat, by volume?
Let "a" be the thickness of the crust, and let "z" be the radius.
So, the volume of your slice, depending on how it's cut, is a fraction of pi*z*z*a.
Do not look into laser with remaining eye.
"Thank you for calling Mega Bank. Please say 'Customer Service' or 'Loan Application'."
"SELECT password FROM members"
"It sounds like you're trying to hack our system. Please hold while I access that data."