PLA Forums
Other Stuff That Has Little To Do With PLA => Phones in the News => Topic started by: gangals on October 25, 2006, 05:54:56 AM
-
This is just asking for trouble:
RSA Security has introduced a product that adds voice as a way for automated telephone banking services to identify users.
http://news.com.com/2100-1029_3-6129174.html?part=rss&tag=6129174&subj=news
-
is not that easy to fake that, not even recordings are reliable, so I think that the system could work
-
Not saying it is, but I could bet that there are going to be a lot of false positives and if someone is able to master the system, then is it just one more false sense of security.
-
same for home banking, ATM's, little pink pigs, etc etc etc
every system is and will be vulnerable, you are right that well people will study this and a lot of idiots will start calling impersonating Bill Gates but that will be all.
-
It'll probably just be an additional layer of security, on top of whatever security there is now. How many customers, though, will bother to take the time to actually input their voice into the system? People are lazy.
Weird that this is coming to BANKS first. You'd think they would try it out somewhere else first, just to make sure it works good.
-
but I could bet that there are going to be a lot of false positives
Yeah. If a guy can make redbox tones with his mouth through trial and error, then with enough chances to attempt it someone somewhere will be able to mimic a person's voice good enough to abuse this.
-
As we all learned from Sneakers, all we have to do is have a female friend go out on a date with the victim-to-be and tape record him saying the required phrases.
"I love it when a man says passport! Can you say passport for me?"
-
I think there will be a lot of false negatives too. People who are sick.
-
As we all learned from Sneakers, all we have to do is have a female friend go out on a date with the victim-to-be and tape record him saying the required phrases.
"I love it when a man says passport! Can you say passport for me?"
HAHA! I remember that one, and I think I saw the same joke on that Maxwell Smart show, can't remember the name, J. Brooks was the producer.
-
Get Smart
-
yeah that one!!! or you were telling that to me? jeje
-
(http://www.jrn.columbia.edu/studentwork/cns/2002-05-08/images/shoephone.jpg)
Do you have a shoe phone?
I think not!
-
Nope but I've got an Old Motorola of that size.
And the pic made me wonder, is this series the precursor of mobile phones??
-
So if you get a cold or lose your voice then what's gonna happen?
-
See, I'm thinking the system will have to allow for that... so it'll have to have some sort of plus or minus of acceptable error on the accuracy of matching a vocal imprint. Which is why I said that someone who can imitate a person's voice accurately enough will be able to abuse it.
-
If it gets to the point where a legitimate user fails the "test" then the bank would have to rely back on present day methods, which can still be abused...
-
If it gets to the point where a legitimate user fails the "test" then the bank would have to rely back on present day methods, which can still be abused...
Yeah, I thought of that. But I also just realized that this might take the place of existing methods of verification because you'll still have to rely on the old methods to verify somebody if they fail the voice test. So this actually will make things less secure in the long run.
-
Is there any Sound engineer on this Forum? I'm almost sure that the audio waves from the voice are like fingerprints, you can't fake that and most than probably if you get some serious voice problem you will need to ask for an operator.
-
Experian, E-Trade, and AmericanBank all use RSA + will have this "Adaptive Authentication for Phone."
-
I'm sure they'll have it so like it has to be a live recording or some shit in order to get in.