On: GAZEploit: Remote keystroke inference attack by ga...

[simondw]

> ‘user-spacey’ applications from the OS manufacturer shouldn’t be privileged beyond other applications

I don't think that's an accurate description, either. The SharePlay "Persona" avatar is a system service just like the front-facing camera stream. Any app can opt into using either of them.

[KaiserPro → simondw]

That app gets a real time Gaze vector, which unless I've misunderstood something, non-core apps don't get.

[simondw → KaiserPro]

Which app?

[KaiserPro → simondw]

I should have said avatar service.