[HN Gopher] The First Spatial Computing Hack
       ___________________________________________________________________
        
       The First Spatial Computing Hack
        
       Author : croes
       Score  : 64 points
       Date   : 2024-06-22 08:48 UTC (14 hours ago)
        
 (HTM) web link (www.ryanpickren.com)
 (TXT) w3m dump (www.ryanpickren.com)
        
       | yreg wrote:
       | I love that the exploit demonstration is filling the user's
       | actual desktop with spiders.
        
       | jan_Sate wrote:
       | hahaha. That video showing the bug. It's literally bugs flying
       | around everywhere.
        
         | geerlingguy wrote:
         | Bats aren't bugs! [1]
         | 
         | [1] https://www.gocomics.com/calvinandhobbes/1989/11/03
        
       | iwontberude wrote:
       | Interesting how the first vulnerability in VisionOS was an old
       | bug from iOS repurposed for VisionOS
        
       | imchillyb wrote:
       | How about a user's dead family member, complete with voice.
       | 
       | "I never got the chance to invest, but now you can put my soul to
       | rest..."
       | 
       | Or something similar to the above. How about an ex or prior
       | trusted friend you've lost contact with.
       | 
       | The implications of this hack to bring untrusted entities to a
       | trusted entity space is almost unfathomable.
        
       | PaulStatezny wrote:
       | > Apple security team seemed to downplay the Spatial Computing
       | angle... > Impact: Processing web content may lead to a denial-
       | of-service > Description: The issue was addressed with
       | improvements to the file handling protocol.
       | 
       | > [Update: After reading my blog post, Apple updated the CVE
       | description to something more sensible.]
       | 
       | I call BS :-P The new description is, "A logic issue was
       | addressed with improved file handling." Equally as
       | vague/misleading/sanitized. How many other bugs with
       | ramifications that would make you squirm are downplayed in Apple
       | CVE summaries?
        
       ___________________________________________________________________
       (page generated 2024-06-22 23:02 UTC)