Haniyeh B. Pasandi

A Decoy-Aware Adversary Defeats Ghost-Keystroke Defenses in Virtual Reality

Virtual reality headsets leak passwords. A camera that watches the typing hand recovers the secret with high accuracy, and a recent line of defenses answers this by injecting decoy keystrokes, called ghosts, into what the attacker sees. The genuine input reaches the application, the ghosts are dropped inside the keyboa...