DEV Community

Cover image for The Next Attack Surface Is Your Attention
Michael Kraft
Michael Kraft

Posted on • Originally published at Medium

The Next Attack Surface Is Your Attention

The Next Attack Surface Is Your Attention

How XR Systems Are Moving Manipulation from Interfaces into Perception Itself

We secured systems, networks, and data —

but ignored the most critical layer:

perception.

XR may turn attention itself into the ultimate attack surface.

We’ve learned how to secure systems.

But we’ve barely started learning how to secure perception.


I’m not a neuroscientist.

I’m not a psychologist.

I’m a developer.

And like many things in software, this started with a simple observation:

Every system has an attack surface.

We usually think of:

  • APIs
  • networks
  • infrastructure

But what if the most critical attack surface isn’t technical at all?

What if it’s your attention?


Attention Is Not Passive

We often treat attention as something neutral.

Something we “have.”

But in practice, it behaves more like a system resource:

  • limited
  • allocatable
  • saturatable
  • exploitable

Modern interfaces already prove this.

Through:

  • infinite scroll
  • variable reward loops
  • notification cycles

They don’t just present information.

They shape:

  • what you see
  • when you see it
  • how long you stay

This is not accidental.

It is engineered.


The First Layer: Manipulating Attention

There is already strong evidence that attention can be directed and distorted.

The Seductive Details Effect shows that visually engaging but irrelevant content reduces learning:

https://en.wikipedia.org/wiki/Seductive_details

The Split Attention Effect demonstrates how divided attention reduces cognitive performance:

https://en.wikipedia.org/wiki/Split_attention_effect

These are not edge cases.

They reveal something deeper:

Attention is not stable — it is controllable.


But This Is Just the Beginning

Everything above happens at the interface level.

Screens.

Feeds.

UI.

Now consider what happens when the interface disappears.


XR Changes the Layer Entirely

Extended Reality (XR) does not just display information.

It controls:

  • what you see
  • what you hear
  • how space behaves
  • where your focus goes

In other words:

It does not sit on top of perception —

it becomes perception.

Research already shows that immersive environments directly influence attention, cognition, and behavior:

https://arno.uvt.nl/show.cgi?fid=174524

XR systems can:

  • guide attention spatially
  • control context completely
  • create a sense of “presence” that replaces external reality

At that point, the system is no longer an interface.

It is an environment.


From Interface to Reality

This creates a critical transition:

UI → UX → XR → Reality

At each step:

  • abstraction increases
  • control deepens
  • external reference points disappear

And with them:

the ability to distinguish system from reality.


Memory Is Not Reliable Either

Even without XR, memory is unstable.

The Misinformation Effect shows that memories can be altered after the fact:

https://en.wikipedia.org/wiki/Misinformation_effect

Imagination Inflation shows that imagined events can later be remembered as real:

https://en.wikipedia.org/wiki/Imagination_inflation

Now combine this with XR:

  • controlled perception
  • repeated exposure
  • immersive context

You get something new:

A system that can influence not only what you perceive —

but what you remember as reality.


A New Class of Systems

This leads to a new category:

Reality-Shaping Systems

These systems do not just:

  • transmit information
  • process data

They:

  • shape attention
  • influence interpretation
  • alter perception
  • affect memory

A Deeper Connection

In Long-Wave Intelligence & Temporal Security, I explored the idea that information can be hidden across time:

https://medium.com/@mkraft_berlin/long-wave-intelligence-temporal-security-1779f6a9cd75

The key idea there was:

What is not detectable is not questioned.

Here we see the same structural pattern:

What is not perceived as manipulation is not resisted.


In The Universe as an Index, I argued that information might not be stored — but reconstructed:

https://medium.com/@mkraft_berlin/the-universe-as-an-index-why-information-might-not-be-stored-but-reconstructable-637b4d087aaa

If that is true, then:

  • perception is reconstruction
  • memory is reconstruction
  • experienced reality is reconstruction

And XR?

XR becomes a system that interferes with the reconstruction process itself.


The Real Shift

Traditionally, systems operate on:

  • data
  • signals
  • communication

But this changes the layer entirely.

We move from:

data → interpretation

to:

perception → reality construction


The New Attack Surface

At this point, the attack surface is no longer:

  • your server
  • your device
  • your network

It is:

  • your attention
  • your perception
  • your memory

Why This Matters

Because this type of system:

  • leaves no clear trace
  • produces no obvious attack signature
  • operates within normal experience

Which makes it fundamentally different from traditional attacks.

You don’t detect it as an attack.

You experience it as reality.


The Risks

This shift introduces new risks:

  • loss of agency
  • invisible manipulation
  • long-term perception drift
  • dependency on mediated reality

And most importantly:

a loss of reference.

Because without an external frame,

you can no longer verify what is real.


Final Thought

We’ve spent decades securing:

  • systems
  • networks
  • data

But we’ve barely started thinking about securing:

perception.

If this trend continues, the next generation of systems will not just:

  • process information
  • transmit data

They will:

shape the way reality is experienced.

Which leads to a simple conclusion:

The next attack surface is not your system.

It is your attention.

And XR turns that into your reality.

Top comments (0)