The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars.
  • 𝒎𝒂𝒏𝒊𝒆𝒍English
    3•2 months ago

    just don’t input passwords while on call/streaming? anyway, looks like it’s easy to fix, just disable avatar eye movement mapping when inputing a password, also I doubt if it’s real vector of attack, more of a proof of concept maybe?