5 ms·
Your voice is indeed a form of authentication to other people that know you. How long until it becomes a valuable token which needs to be protected? I can see
by 01100011 4y ago
Your voice is indeed a form of authentication to other people that know you. How long until it becomes a valuable token which needs to be protected?
I can see various forms of 'man in the middle' attacks taking place with selective conversational interposing allowing an attacker to inject false data into a live conversation between two parties.
Imagine a simple example using caller ID spoofing: Attacker calls two parties and uses stolen voices to establish a reason for the call(as both people will know they did not instigate the conversation, both will need to be convinced that the other party did). Now the conversation is started and has context. Now the attacker can steer the conversation to various topics and selectively invert various factual exchanges or negotiations. Afterwards, both parties will be left with a valid memory of the interaction and, unless they confer on who instigated the call, may have little reason to suspect that sections of the exchange were manipulated.
- ulnarkressty 4y agoThis can be mitigated somewhat if both parties agree on a secret exchange in advance. I guess it's just a matter of time until parents all over will have challenge-response sheets next to the phone to prevent them from wiring money to their "son" who's been in a terrible accident.
- 01100011 4y agoSomewhat, but when the attacker controls the channel they can allow the challenge-response to complete before compromising the integrity of the channel.