Apple fixes scary Vision Pro bug that allowed hackers to fill your virtual room with spiders | Mashable.
Apple fixes scary Vision Pro bug that allowed hackers to fill your virtual room with spiders
 |
| Hello sir, may I interest you in the latest visionOS update? Credit: NurPhoto / Getty Images |
Apple has fixed a visionOS vulnerability that allowed a hacker to fill a Vision Pro user's virtual space with 3D animated objects.
When spelled out like this, it doesn't sound that scary, but replaced "3D animated objects" with spiders, bats, snakes, or anything else that scares you, and you've got yourself one of the most intriguing and ominous bugs we've ever heard of.
The vulnerability for was discovered by Ryan Pickren, an independent researcher who already found a couple of bugs in Apple's software, including nasty iPhone and Mac camera issues. Pickren told Mashable via email that he believes the bug he'd found in visionOS allows for the first "spatial computing" hack. He also said that Apple awarded him a bounty for finding and describing the issue.
The bug stems from the way visionOS handles apps that can spawn 3D objects in your virtual space while you're using the Vision Pro. As Pickren explained on his blog, the company severely restricted who and what can do this in most cases, but "forgot" about an older, web-based 3D model viewing standard called Apple AR Kit Quick Look. By adding some simple code to a website, a hacker could bypass Apple's restrictions and launch "an arbitrary number of 3D, animated, sound-creating, objects without any user interaction whatsoever."
Pickren supplied some examples by tapping into a lot of folks' worst nightmares: by adding virtual spiders and bats into a Vision Pro user's virtual space.
Fortunately, Apple fixed this vulnerability in visionOS 1.2, which launched earlier this month, though the company's description (unsurprisingly) don't mention eight-legged arthropods.
In any case, it appears Vision Pro users are safe from 3D monsters bursting into their virtual life — for now.
Topics Apple Augmented Reality
.webp)
Thought Apple is very secured.
ReplyDeleteThis is the kind of hacking I can fully get on board with 😆
ReplyDeleteI called it… Spider Mentos or Mentos Spider till now. Because of the resemblance of Mentos candy on the tummy. Hahaha
ReplyDeleteProbably one of my greatest fear, to be encountered by Spider Mentos on toilet area while pooping. 🤣
No no no no. They had to add a cat room mode
ReplyDeleteNow that's a bug!
ReplyDeleteSwitch to Airplane mode 😂😂😂
ReplyDeleteSeriously
ReplyDeleteIf you are going to write in English please make it correct English.
ReplyDeleteThe worst hackers are those who don't do anything and just watch your every step.
ReplyDeleteAnd I think FB has several of them in their so-called Community Standards dept !?!🤷
DeleteIf I were this paranoid I'd see a shrink.
DeleteSince they're spiders, technically it's a security arachnid, not a bug.
ReplyDeleteI'm sure all 7 people using the Vision Pro will be glad
ReplyDeleteneed a bug to get people to even consider thinking about it and then **swipes up***
DeleteBug was displaying bugs
ReplyDeleteBug of bugs? 😁
ReplyDeleteThis Year Has Been Tough For Many, And In Order To Provide Assistance, I Will Be Donating Five Grand To Seven People Who Send Me A Message With The Words "God Did"
ReplyDeleteAnd here's a prime example of a scamming hacker !
DeleteMay your pants be perpetually on fire.
Deleteif they were smart / cultured they'd have used facehuggers
ReplyDeleteWill I still be able to re-implement this on the Vision Pro then?!
ReplyDeletehttps://i.giphy.com/.../v1.../fJKG1UTK7k64w/giphy.gif
actually… this would be kind of amazing 😂
ReplyDeleteMany promises fail But God Never Fail I'm helping those in need,u paying of their bills, debts and mortgages 5 GRAND is Gifted to the 5 first person that sends "GOD NEVER FAIL"💙🕊️🧸
ReplyDeleteAnd again here's another prime example of a scamming hacker !
DeleteHello awesome clients I am an ethical hacker with many years of experience in this field and an expert in programming, hacking, recovery, penetration of crypto funds, social media platforms, monitoring cheating spouse, getting WhatsApp access, regaining Facebook access and more.
ReplyDeleteKINDLY CONTACT NOW FOR GUARANTEED SERVICE DELIVERY...
Spider eat bug
ReplyDeleteYIKES!!!
ReplyDelete🕷
ReplyDeleteIt's a security arachnid...
ReplyDeletelol bug
ReplyDeleteThankfully by the time there's major demand for VR, issues like this will be fixed because of sacrifices--and I do mean sacrifices--by companies like Apple and Meta. Right now it's a niche market at best with little return on the investment.
ReplyDeleteOr...you could just take them off and read a book.
ReplyDeleteAustralian hackers for sure.
ReplyDeleteThat is the ugliest website I have ever seen not hosted on GeoCities.
ReplyDeleteWell done Mashame
Apple should just walk away, and say they gave it their best shot.
ReplyDeleteDo you give up on everything at the slightest road bump?
Good thing I don't waste my money on apple products then 🤣
ReplyDeletePeople use the Apple Vision Pro?
ReplyDeleteYea, it’s great for watching movies and playing emulators
Delete…and apparently playing non-consenting exterminator simulator
DeleteYeah, that too. Although it was fixed a week ago
DeleteThat was an usually crappy write up. Is this indicative of all American News or just more Tabloidesque than average?
ReplyDelete*their.
ReplyDelete