Abstract: Consumer VR headsets increasingly support text entry via air-pinch gestures on virtual keyboards, yet app-visible telemetry can inadvertently expose keystrokes. We present AirSpy, a ...