An admission: I am not a fan of big spiders. I'm especially not a fan of big spiders right up in my face, which is why I'm glad I've never experienced an issue a researcher discovered with the Apple Vision Pro headset—which allowed them to create a website that displayed giant animated arachnids and screeching bats in a wearers field of vision.
Ryan Pickren, master of mischief, discovered that Apple's WebKit still supported an older 3D model viewing standard that allowed them to render animated objects on an Apple Vision Pro (via Futurism). With a simple bit of code, any website could be configured to instruct visionOS Safari to treat certain links as instructions to render 3D models, displaying them on the Vision Pro's high-resolution internal screens as if they were in the room.
Pickren also discovered that a similar technique could add spatial audio, in order to make sound effects appear as if they were coming from the animations themselves. Bully.
So what models were chosen, out of a vast array of potential options, to appear inside Apple's allegedly struggling VR headset? Well, spiders of course, big horrible spiders, seemingly skittering all over your desk. Slightly less horrifying (depending on your particular phobias, I imagine) was a flock of bats, which I've just learned can also be referred to as a «cauldron». The more you know!
To make things worse, simply closing Safari wasn't enough to get rid of the offending beasties, as they were handled by Quick Look, a separate application. The only way to reliably remove them from view (short of tearing the Vision Pro from your face and screaming into the void) was to manually tap each one. Touch the horrifying virtual spider to remove it. Oh no thank you.
Still, Pickren informed Apple of the exploit back in February, and the company appears to have addressed the issue in its June visionOS 1.2 update. Apple has also awarded the researcher with a bounty for finding the bug, or I suppose in this case, developing a
Read more on pcgamer.com