ORT recovered reflected on-screen text from eyeglasses in video calls

Reconstruction

ORT is passive leakage rather than malware-driven exfiltration. During a video call, light from text displayed on a user's screen can reflect from the outer surface of their eyeglasses into the webcam. The remote participant receives that reflection as part of the ordinary video stream even though the screen itself is not being shared.

The challenge is that the reflected text is small, warped, low-contrast and mixed with glare and motion. ORT addresses that with reflection-aware preprocessing plus scene-text detection and recognition models, reducing the amount of manual inspection needed to extract useful text. The physical reason is simple: specular reflection preserves some spatial structure from the display, and improved image processing can recover information that a human observer might not notice in the raw frame.

The result does not imply universal readability of arbitrary screen content. Camera resolution, eyeglass geometry, head pose, text size, lighting, compression and lens properties all affect what survives the optical path.

Mechanism & boundary

1. 01

   Display sensitive text during a video call

   The victim views on-screen content while their webcam is active; no malware or screen sharing is required.

   Boundary: private display / local user

2. 02

   Reflect display light from eyeglasses

   A portion of the screen's optical signal is redirected by the lens surface toward the camera.

   Boundary: display emission / reflective surface

3. 03

   Capture the reflection in the video stream

   The webcam records the eyeglass region and sends it through the normal conferencing path.

   Boundary: local optical scene / remote video participant

4. 04

   Preprocess distorted reflection frames

   Image processing compensates for blur, contrast loss, warping and other reflection artifacts.

   Boundary: raw video / recoverable text image

5. 05

   Detect and recognize text

   Scene-text detection and OCR convert the recovered reflection into machine-readable content.

   Boundary: processed pixels / extracted information

Timeline

1. Feb 24, 2026

   ORT record added to IEEE Xplore

   report

   IEEE Xplore added the ACSAC 2025 paper describing the automated reflected-text recognition technique.

Claims & evidence

Implications

ORT shows that camera privacy extends beyond the objects intentionally framed by the user. A participant can leak screen information through reflections even when screen sharing is disabled. The practical risk is conditional rather than universal, but improving webcams and automated recognition lower the effort required to exploit favorable viewing conditions.

Controls & mitigations

• Blur or mask eyeglass regions when sensitive screen content is present and the conferencing workflow can tolerate it.
• Disable or minimize camera exposure for tasks that display highly sensitive text when video is not required.
• Adjust display position, camera angle, lighting or eyewear to reduce useful reflections instead of assuming the remote party can see only the intended frame.
• Apply least-privilege camera policies in environments where reflected information is part of the threat model.

What remains unknown

• The public results do not establish reliable OCR for arbitrary small text, every eyeglass type or every conferencing setup.
• Recognition quality depends on lighting, text size, resolution, compression, head movement, camera angle and lens properties.
• The case demonstrates information leakage potential, not evidence that a named victim was covertly monitored in the wild.

Connected research