I am not going to complain about windows vista. I am going to say that I don’t think Microsoft realized something about one of the workarounds for the speech recognition flaw. I really don’t think you could call this a flaw thought, because in reality, this would totally be overlooked.
Microsoft has released a statement about workarounds you can do. such as turning on your microphone and stuff, and also not allowing windows media player to play audio files. well there is one thing they didn’t mention, the internet and websites. i know that websites do play audio and alot of web banners play audio and music. A hacker can record a audio command and put it on a website. a internet user does have a microphone and stuff enabled and has the speakers volume turned up. the user goes to the website, and the audio file is played. well, the speech recognition software could execute the command and the computer could be controlled remotely.
Even if the user is under a limited user account, the audio command could contain the Run As command and execute a command with administrative priviledges.
