Apple Vision Pro hacked by microarchitecture security expert

A security flaw has emerged after Apple introduced the Apple Vision Pro. Joseph Ravichandran, an MIT PhD student with expertise in microarchitecture security, has identified a critical kernel flaw in the device’s operating system visionOS. This flaw could potentially allow jailbreaking (modifying to remove restrictions imposed by the manufacturer) and malicious software designed to take advantage of this new hardware.

Apple Vision Pro Price

The starting price of Apple Vision Pro in the USA is $3,499 (approximately Rs 2,90,520). Apple Vision Pro was launched in the US earlier this week. Pre-orders for this device have started from January 19, 2024.

Drawbacks in Apple Vision Pro

by Joseph Ravichandran Tweets X shared their findings in a series of posts that included photos of the Apple Vision Pro’s response to the kernel flaw. After the flaw, the device goes into “Perspective Mode” and instructs users to remove the headset in preparation for a restart, which is scheduled to happen in 30 seconds.

After this restart, Ravichandran highlighted an emergency log that indicated a kernel crash. He also showed a custom application called Vision Pro Crasher, which included a skull with a headset icon and a button labeled Crash My Vision Pro. Security researchers are often eager to test new hardware when it comes out. Much like jailbreaking an iPhone, Ravichandran’s move highlights potential security issues for the Vision Pro ecosystem.

Apple has a history of trying to fix security vulnerabilities quickly, especially for high-profile products like the Vision Pro. Ravichandran hasn’t confirmed if he submitted his findings to Apple, though the company’s security bounty program may encourage such disclosures. The gradual rollout of Vision Pro could target early adopters of the technology, reducing the likelihood of widespread problems. Apple will also try to fix the flaw in a quick update to minimize any risk.