The First Spatial Computing Hack

[croes]

https://www.ryanpickren.com/vision-pro-hack

[yreg]

I love that the exploit demonstration is filling the user's actual desktop with spiders.

[qingcharles → yreg]

It was a "web" vulnerability.

[imchillyb]

How about a user’s dead family member, complete with voice.

“I never got the chance to invest, but now you can put my soul to rest…”

Or something similar to the above. How about an ex or prior trusted friend you’ve lost contact with.

The implications of this hack to bring untrusted entities to a trusted entity space is almost unfathomable.

[iwontberude]

Interesting how the first vulnerability in VisionOS was an old bug from iOS repurposed for VisionOS

[PaulStatezny]

> Apple security team seemed to downplay the Spatial Computing angle... > Impact: Processing web content may lead to a denial-of-service > Description: The issue was addressed with improvements to the file handling protocol.

> [Update: After reading my blog post, Apple updated the CVE description to something more sensible.]

I call BS :-P The new description is, "A logic issue was addressed with improved file handling." Equally as vague/misleading/sanitized. How many other bugs with ramifications that would make you squirm are downplayed in Apple CVE summaries?

[jan_Sate]

hahaha. That video showing the bug. It's literally bugs flying around everywhere.

[geerlingguy → jan_Sate]

Bats aren't bugs! [1]

[1] https://www.gocomics.com/calvinandhobbes/1989/11/03

[yreg → geerlingguy]

As usually with Calvin and Hobbes, I don't get the point of the strip.

[qingcharles → yreg]

I don't think anyone does.

[underlipton]

Somehow, I knew it would be spiders.