AI can steal passwords in virtual reality from avatar hand motions

Someone typing on a physical keyboard while attending a virtual reality meeting could end up leaking passwords and other sensitive information to an attacker who uses artificial intelligence to interpret the avatar’s subtle hand movements.

Researchers trained AIs to analyse the hand movements of virtual avatars in Meta Horizon Workrooms, a virtual office platform provided by Meta. The AIs then used the hand movements to reconstruct the keystrokes typed by the avatar’s user over the course of brief typing sessions.

“You…