Cybersecurity

5631 readers

36 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago

MODERATORS

[email protected]

Apple Vision Pro’s Eye Tracking Exposed What People Type (www.wired.com)

submitted 1 month ago by [email protected] to c/[email protected]

11 comments fedilink hide all child comments

The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars.

Archived version: https://web.archive.org/web/20240912100207/https://www.wired.com/story/apple-vision-pro-persona-eye-tracking-spy-typing/

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 22 points 1 month ago (2 children)

That should be an easy fix in a future software update by simply not replicating eye movement as soon as the user is looking at the keyboard.

[–] [email protected] 25 points 1 month ago (1 children)

The solution is constant googly eyes.

[–] [email protected] 15 points 1 month ago (1 children)

Let's be honest: the solution is always googly eyes.

[–] [email protected] 1 points 1 month ago

https://youtu.be/zc7qJE9Nzo8

[–] [email protected] 6 points 1 month ago (1 children)

Sounds like what they already did: as soon as the virtual keyboard pops up the eye movement isn't transmitted as part of the avatar.

[–] [email protected] 5 points 1 month ago

Oh I see. According to the article:

The GAZEpolit researchers reported their findings to Apple in April and subsequently sent the company their proof-of-concept code so the attack could be replicated. Apple fixed the flaw in a Vision Pro software update at the end of July, which stops the sharing of a Persona if someone is using the virtual keyboard.

An Apple spokesperson confirmed the company fixed the vulnerability, saying it was addressed in VisionOS 1.3.