Eye Movement Security Vulnerability on Apple Vision Pro

Along with the praise for its groundbreaking features, Vision Pro has also faced a lot of controversy, especially regarding its high price and some security-related issues.

Vision Pro not only offers a completely new user experience but also achieves many remarkable achievements in technology. One of the most impressive things is the device's eye tracking system. However, this is also the point where this product becomes the target of a new type of security exploit that has never appeared on any other device.

Vision Pro is considered one of the best augmented reality (AR) headsets available today.

Researchers have found that it is possible to determine what a user is typing just by tracking their eye movements. The principle that Apple uses to allow users to navigate and navigate through the visionOS interface has inadvertently become a tool that can be used against them with astonishing accuracy. Specifically, according to the study, when analyzing eye movements, researchers can guess passwords with up to 77% accuracy in the first five tries. For text messages, the rate is even higher, reaching 92%.

It is worth noting that this exploit does not require direct penetration of the Vision Pro device. Instead, the virtual characters (avatars) that users use to represent themselves in the virtual world are the tools for attackers to decode what they are typing. Simply by tracking and analyzing the eye movements of these characters, one can collect sensitive user data.

Fortunately, the vulnerability was not exploited before researchers alerted Apple in April of this year. The company responded by releasing a patch in visionOS 1.3 in late July. However, many still question why it took Apple so long to fix the problem, especially when the solution was simply to disable the virtual characters while users were typing. Regardless, the important thing is that the vulnerability was addressed, bringing safety to users.

X [embed]https://www.youtube.com/watch?v=IY4x85zqoJM[/embed]

The security incident is reminiscent of sci- fi tropes, where technology can achieve seemingly impossible feats, like reading lips from a distance or zooming in on images unreasonably. But this time, the Vision Pro's eye tracking is a true testament to the potential of modern technology.

The Vision Pro is arguably one of the best augmented reality (AR) headsets available today, but it also serves as a reminder that when developing new technology, manufacturers must always be prepared to address the novel security challenges that it may bring.

Hung Nguyen (According to PhoneArena)

Source: https://www.congluan.vn/lo-hong-bao-mat-tu-chuyen-dong-mat-tren-apple-vision-pro-post312322.html