PLA Forums
Other Stuff That Has Little To Do With PLA => Phones in the News => Topic started by: rbcp on May 22, 2008, 07:24:34 AM
-
http://findarticles.com/p/articles/mi_m0EIN/is_2002_Oct_29/ai_93510543 (http://findarticles.com/p/articles/mi_m0EIN/is_2002_Oct_29/ai_93510543)
"Nuance (Nasdaq:NUAN), the speech software experts, today announced that Bell Canada has selected Nuance Verifier 3.0 voice authentication software as a security solution for Speech Enabled Field Access System (SEFAS), the access to the dispatch system used by the carrier's field technicians. In deployment since early October, this Nuance-powered solution will, upon full roll out, ultimately enable up to 5,000 technicians to securely access and update customer installation and repair orders from any phone."
This is great. They're going to start using voice authentication to verify field techs! No more having to know employee codes. Just figure out a way to get a field tech to say the phrase and you've got access to field tech stuff for as long as that guy is employed!
-
is that the same software they use for customers?
-
is that the same software they use for customers?
I would assume so, since it's with the same phone company.
You know what would make it more secure is to have it validate their voice with a unique password or their tech code. Why can't they just do that?
-
Because then it wouldn't be any fun for us.
-
Hmm, time I record my voice and edit it in audacity to 1,000 pitches and tones. Then let the voice-cracking begin.
-
I see a few problems to be solved then. So we need to firstly know the code phrase in order to figure out how to split it up into things we can trick the tech into saying. Then we need to find out how to get access to the techs in the first place.
If you were going to be uber-l33t about it all you'd have to do is hook up a line recorder to a payphone, then call the phone company and bitch about it, then wait til the tech shows up and recover the recording device.
-
depending on how dumb the techs are you could call their number, record the prompt for their voice password, and then call the tech's office and just playback the prompt and see if they say their password.
-
depending on how dumb the techs are you could call their number, record the prompt for their voice password, and then call the tech's office and just playback the prompt and see if they say their password.
I like the way you think.