full-disclosure - Re: defeating voice captchas

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue Feb 14 12:28:56 2006
From: ol at uncon.org (ol)
Subject: Re: defeating voice captchas

> >
> > (*) Of course, it's better to use sound sources that are hard to
> > identify, and are ideally not available to the attacker; else he could
> > obtain the same sounds and subtract them from the audio. I think some
> > random pitch shifting (tremolo) would help against this.
>
> OK. Use voice recognition.

We all know how well those work! Using IVR systems which reliably detect
what I say when I speak slowly and clearly without sounding like Basil
Faulty speaking to Manuel are non existent. So surely the reverse would be
true of any voice recognition system applied to voice captchas.....