Hacker News Reader

Comment by ShaneWilton | Hacker News Reader

The same thing happened about a month ago with an Xbox One commercial that would turn on people's consoles: http://www.businessinsider.com/xbox-one-ad-turning-on-people...

View on HN

There was another one where a guy with the name "XBox Shut Off" would run around griefing players in Call of Duty and when they yell at him to stop, accidentally initiate the "off" command.

https://www.youtube.com/watch?v=hGZeU4s28kk

Reminds me of the way some friends and I came up with a way to trick people into logging out in WoW. There's the /logout command, which initiates the logging out sequence. However, there's also the /camp command, which does the same thing, but a fair amount of people don't know about it. Now, logging out normally takes 20 seconds, but if you're in one of the capitals, it's instant. So we would say in trade chat(a chat channel that's only visible to people in a capital) about how /camp sets down a campfire, unwitting players would try it out, and find themselves back on the character select screen. Just a bit of harmless fun, but you would not believe how upset people would get.

Back on the quake 3 engine I used to convince users that typing /disco would spawn a giant disco ball complete with lights and music. /disco is the same as /disconnect. Good times. :)

It's funny; without your example, I probably would have had to spend another 5-10 minutes figuring out exactly what this was.

Yeah, the research paper is a bit wordy. It's novel, though, because here it adds another vector for malware to inject into legitimate apps to hijack a phone, without requiring new permissions.

I could see it becoming a serious concern in places like China, where 3rd party markets are much more popular, and republishing existing apps with malware is commonplace.

That's actually a great point I hadn't thought of - if the attack uses English, your average Chinese person won't know what's being said and what's being taken.

If you don't speak English, your phone probably isn't set to EN-US or another locale where the voice recognition would accept english. I'm guessing this depends on the voice reco being set to the right locale.

At least for the Moto X it's somewhat tied to your own voice. But Google didn't want to wait until all devices had such chips, so they implemented the hot word thing without any voice training.

Reply on news.ycombinator.com