These output attacks are more serious in immersive AR applications than they are in today’s desktop or handheld computing scenarios both because it is more difficult for users to distinguish virtual from real feedback and because it may be more difficult for users to remove or shut down the system.