Apple's Vision Pro has a way of showing the world a virtual version of you while you interact with others in virtual reality. Unfortunately,cerita lucah hari raya tumblr this very feature – called Persona – could've been used by hackers to steal a Vision Pro user's sensitive data.
The security flaw was discovered by a group of six computer scientists from the University of Florida's Department of Computer Science, and it was first reported on by Wired.
The GAZEploit attack, as it was dubbed by the researchers, works by tracking the eye movements of a user's Persona to identify when they're typing something on the Vision Pro's virtual keyboard. The researchers discovered that users tend to direct their gaze onto specific keys that they're about to click, and were able to construct an algorithm that identified what the users were typing. The results were quite accurate; for example, the researchers were able to identify the correct letters of users' passwords 77 percent of the time. When it came to detecting what people were typing in a message, the results were accurate 92 percent of the time.
The researchers disclosed the vulnerability to Apple back in April, and Apple fixed it in visionOS 1.3, which came out in July. In the release notes, Apple says that the flaw enabled inputs to the virtual keyboard to be inferred from Persona.
"The issue was addressed by suspending Persona when the virtual keyboard is active," Apple wrote in the release notes. Vision Pro users who haven't yet updated to the latest version are advised to do so as soon as possible.
While simply disabling Persona while the user is typing was a pretty simple fix, the flaw does raise the question of just how much info a malicious hacker could infer just by observing a virtual version of you.
SEE ALSO: Apple Vision Pro: I watched a Billie Eilish concert in Bora Bora — and I didn't need to spend a pennyThe researchers said that the attack hasn't been used against someone using Personas in the real world. But what makes this attack particularly dangerous is that it only requires a video recording of someone's Persona while the person was typing, meaning an attacker could still use it on an older video. It seems that the only way to mitigate this issue is to erase any publicly available videos where your Persona is visible while typing; we've reached out to Apple for clarification on what can be done to protect your data.
Topics Apple Cybersecurity
Salma Hayek is firmly against Barbie's Frida Kahlo dollPETA activists storm Crufts dog show pitchThe Rock taught his daughter about International Women's Day, and she totally stole the showFitbit Ace is a fitness tracker for kidsGirl drunkenly takes photos of her locked doors to reassure her sober selfSalma Hayek is firmly against Barbie's Frida Kahlo dollUber CEO slams MIT after study on rideA chicken laid a huge egg with another egg already inside itCryptocurrency startup wants to 'pay' you to watch porn, but there's a catchUber CEO slams MIT after study on ride 'Nihonmachi' Musical Returns to Aratani REVIEW: Performance Artist Traces His Nisei Mother’s Journey Centenary UMC Hosts Arigato Bazaar on May 5 'Spirited Away' at the Nuart ‘The Etymology of Hapa’ at JANM The Beauty in Community Theatre Performance of ‘Crossing Borders’ at USC L.A. Daiku Concert at Gardena Valley Baptist Judith Hill to Perform at JANM Gala Staged Reading of Play by Velina Houston
0.2271s , 10024.015625 kb
Copyright © 2025 Powered by 【cerita lucah hari raya tumblr】Apple fixes dangerous 'GAZEploit' Vision Pro security flaw,Global Hot Topic Analysis