OpenAI has issued an update to its ChatGPT app for Mac, after a developer discovered the app was locally storing users’ conversations with the chatbot in plain text.
Pedro José Pereira Vieito told The Verge‘s Jay Peters: “I was curious about why OpenAI opted out of using the app sandbox protections and ended up checking where they stored the app data.”
That led Pereira Vieito to develop “ChatGPTStealer,” a simple app to demonstrate how easy it is to load the chats in a text window outside of the ChatGPT app. After successfully trying out the app for himself, Peters said he was also able to see the text of conversations on his computer just by changing the file name, indicating the extent of the privacy risk.
The ChatGPT Mac app is available solely through OpenAI’s website, which is why it has not been obligated to follow Apple’s sandboxing requirements that apply to software distributed via the Mac App Store. The oversight basically meant any other running app or process could potentially access the ChatGPT conversations without prompting the user for permission.
After The Verge contacted OpenAI about the issue, the company released an update that it says encrypts the chats. “We are aware of this issue and have shipped a new version of the application which encrypts these conversations,” OpenAI spokesperson Taya Christianson told the website. “We’re committed to providing a helpful user experience while maintaining our high security standards as our technology evolves.”
After downloading the update (v1.2024.171), Pereira Vieito’s app no longer works, and Peters said he was no longer able to see his conversations with the chatbot in plain text.
Popular Stories
Apple Leak Confirms Four iPhone 16 Models With Same A18 Chip
Code discovered in Apple’s backend by Nicolás Alvarez and shared with MacRumors confirms Apple’s plans to release four iPhone 16 models this year, and it indicates that the devices will all have the same A-series chip. There are mentions of new model numbers that are not associated with existing iPhones, and that have the numbering scheme Apple uses for its flagship devices. The code…
Netflix Starts Booting Subscribers Off Cheapest Basic Ads-Free Plan
Netflix is proceeding with its plan to discontinue its cheapest ad-free subscription tier, starting with the UK and Canada, with more countries inevitably to follow. The streaming giant has reportedly begun notifying users via on-screen messages about the last day they can access the service unless they upgrade. One Reddit user shared a notification they had received from the Netflix app,…
Leak Confirms Apple’s Work On ‘Home Accessory’
Code discovered on Apple’s backend by MacRumors confirms Apple is indeed working on a long-rumored home accessory in addition to the HomePod and Apple TV. The code references a device with the identifier “HomeAccessory17,1,” which is a new identifier category. The name is similar to the HomePod’s “AudioAccessory” identifier. Interestingly, the 17,1 in the identifier name suggests that…
MacBook Owners With Faulty Butterfly Keyboards to Get Payouts Soon
Two years after Apple paid $50 million to settle a class-action lawsuit over faulty MacBook butterfly keyboards, funds from the settlement will be going out to affected customers. An update on the MacBook Keyboard Litigation Settlement website says that the court issued a payment order on June 27, 2024, with payments set to be issued for approved claims by August 2024. Emails about the…
