Security vulnerability from eye movements on Apple Vision Pro

Công LuậnCông Luận14/09/2024


Along with praise for its groundbreaking features, Vision Pro has also faced a fair amount of controversy, especially regarding its high price and some security-related issues.

Vision Pro not only offers a completely new user experience, but also achieves many remarkable achievements in technology. One of the most impressive things is the device's eye tracking system. However, this is also the point where the product becomes the target of a new type of security exploit that has never been seen on any other device.

automatic eye protection system on apple vision pro image 1

Vision Pro is considered one of the best augmented reality (AR) headsets available today.

Researchers have discovered that it is possible to determine what a user is typing just by tracking their eye movements. The principle that Apple uses to allow users to navigate and navigate through the visionOS interface has inadvertently become a tool that can be used against them with astonishing accuracy. Specifically, according to the study, by analyzing eye movements, researchers can guess passwords with up to 77% accuracy in the first five tries. For text messages, the rate is even higher, reaching 92%.

It is worth noting that this exploit does not require direct compromise of the Vision Pro device. Instead, the virtual characters (avatars) that users use to represent themselves in the virtual world are the tools for attackers to decode what they are typing. Simply by tracking and analyzing the eye movements of these characters, one can collect sensitive user data.

Fortunately, the vulnerability was not exploited before researchers alerted Apple in April of this year. The company responded by releasing a patch in visionOS 1.3 in late July. Still, many question why it took Apple so long to fix the issue, especially when the solution was as simple as disabling the virtual characters while users were typing. Regardless, the important thing is that the vulnerability was addressed, keeping users safe.

X [embed]https://www.youtube.com/watch?v=IY4x85zqoJM[/embed]

The security incident is reminiscent of sci-fi tropes, where technology can achieve seemingly impossible feats, like reading lips from a distance or zooming in on images in an unreasonable way. But this time, the Vision Pro’s eye tracking capabilities are a true testament to the potential of modern technology.

The Vision Pro may be considered one of the best augmented reality (AR) headsets available today. However, this story is also a reminder that when developing a new technology, manufacturers must always be ready to face the novel security challenges that technology can bring.

Hung Nguyen (According to PhoneArena)



Source: https://www.congluan.vn/lo-hong-bao-mat-tu-chuyen-dong-mat-tren-apple-vision-pro-post312322.html

Comment (0)

No data
No data

Event Calendar

Same tag

Same category

Same author

No videos available