<story><title>GAZEploit: Remote keystroke inference attack by gaze estimation in VR/MR devices</title><url>https://www.wired.com/story/apple-vision-pro-persona-eye-tracking-spy-typing/</url></story><parent_chain><item><author>generalizations</author><text>Whole point of the digital face is to look real though, and freezing the gaze would look unnervingly fake.</text></item><item><author>LorenDB</author><text>I&amp;#x27;m genuinely shocked. I assumed that Apple would have foreseen this possibility and locked the Persona&amp;#x27;s eyes somewhere as long as the user was typing, at least for passwords.</text></item></parent_chain><comment><author>dwallin</author><text>I&amp;#x27;m confident they could come up with a filler eye animation algorithm that was convincing enough to pass muster for short periods of time. Even if hand coding something didn&amp;#x27;t quite work out, they certainly have tons of eye tracking data internally they could use to train a small model, or optimize parameters.</text></comment>
<story><title>GAZEploit: Remote keystroke inference attack by gaze estimation in VR/MR devices</title><url>https://www.wired.com/story/apple-vision-pro-persona-eye-tracking-spy-typing/</url></story><parent_chain><item><author>generalizations</author><text>Whole point of the digital face is to look real though, and freezing the gaze would look unnervingly fake.</text></item><item><author>LorenDB</author><text>I&amp;#x27;m genuinely shocked. I assumed that Apple would have foreseen this possibility and locked the Persona&amp;#x27;s eyes somewhere as long as the user was typing, at least for passwords.</text></item></parent_chain><comment><author>kobalsky</author><text>add sunglasses to the avatar while typing</text></comment>