Matt Burgess / Wired:
Researchers detail GAZEploit, a now-fixed Vision Pro vulnerability allowing hackers to determine which key a user is typing based on the user's eye movement — The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars.
