The Only Control a Stranger Can Verify Is a Physical One

Raven Prism, an early-stage device previewed at AWE this year, includes local inference and a physical cover over the camera. Tony Vitillo's SkärredGhost review covers the glasses and their privacy approach. It is an example of a design direction, not a product recommendation, because the device has not shipped.

Controls inside a device leave a stranger with a claim on a website. Material over a lens is visible and unambiguous. An overnight software update cannot reverse it.

A determined wearer can defeat a cover in one second by sliding it open. By security standards, that makes it weak. Security is the wrong measure here. The cover makes the ordinary case readable, allowing someone nearby to distinguish a device that is off from one that is watching without interpreting anybody's intentions.

That is a lower bar than some industry proposals aim for, yet it may be more useful. A weaker control that a stranger can read may offer more practical notice than a stronger one that must be taken on trust.

Physical covers work only when closed is the default and the state looks closed to someone who has never seen that model. Manufacturers currently design them differently, leaving bystanders to learn a new vocabulary for every product.

A standards body settles that early or never, and nobody has taken it up. The feature remains in a boutique device at enthusiast pricing, treated as a differentiator for buyers. Yet it is the only part of the arrangement people outside the purchase can actually use.

A common visual convention would not make a cover tamper-proof. It would make its state easier to interpret across models. Bystanders need to know whether the lens is physically blocked, not whether the device can resist a determined user.

The convention also needs to account for accessibility and ordinary use. A cover that is difficult to operate, easily mistaken for an open lens or incompatible with prescription components creates barriers. Clear states and consistent placement matter more than a feature that cannot be understood or used reliably.