ChatGPT Mac App Stored User Chats in Plain Text Prior to Latest Update

[MacRumors]

OpenAI has issued an update to its ChatGPT app for Mac, after a developer discovered the app was locally storing users' conversations with the chatbot in plain text.

Pedro José Pereira Vieito told The Verge's Jay Peters: "I was curious about why OpenAI opted out of using the app sandbox protections and ended up checking where they stored the app data."

That led Pereira Vieito to develop "ChatGPTStealer," a simple app to demonstrate how easy it is to load the chats in a text window outside of the ChatGPT app. After successfully trying out the app for himself, Peters said he was also able to see the text of conversations on his computer just by changing the file name, indicating the extent of the privacy risk.

The ChatGPT Mac app is available solely through OpenAI's website, which is why it has not been obligated to follow Apple's sandboxing requirements that apply to software distributed via the Mac App Store. The oversight basically meant any other running app or process could potentially access the ChatGPT conversations without prompting the user for permission.

Post by @pvieito View on Threads
​

After The Verge contacted OpenAI about the issue, the company released an update that it says encrypts the chats. "We are aware of this issue and have shipped a new version of the application which encrypts these conversations," OpenAI spokesperson Taya Christianson told the website. "We're committed to providing a helpful user experience while maintaining our high security standards as our technology evolves."

After downloading the update (v1.2024.171), Pereira Vieito's app no longer works, and Peters said he was no longer able to see his conversations with the chatbot in plain text.

Article Link: ChatGPT Mac App Stored User Chats in Plain Text Prior to Latest Update

 

[Plutonius]

It seems like I hear that excuse a lot from different companies that screw up and are caught .

 

[Apple_Robert]

It doesn’t say much for ChatGPT, that such was not found beforehand.

 

[iphonehype]

well thats a bit of an oversight by OpenAI!

 

[Pezimak]

🤣😂🤣 good ol Microsoft, but many companies have been caught storing sensitive data as plain text no doubt to save money. Only issue I have is no one seems to go to prison or get fined massively for it, even when hackers steal it all and sell it on or leak it on the internet.

 

[Chiromac81]

Here we go...

Captain obvious

 

[Chiromac81]

"im shocked!!"

Said no one ever

 

[zilchfox]

Makes you wonder how they store prompt history on the web-based version.

 

[vkd]

Aside from being a massive security risk, this so-called Artificial Intelligence is nothing more than a disguised coup to manipulate public opinion, censor free thought by eliminating what they consider to be opposed to their desired schematic and also ultimately to insidiously monitor everybody's activity. Of course they will profess otherwise and efforts will be seen to create privacy, but as we see in these initial stages, first with Microsoft and now others including this, their prime intentions are not security based, our privacy is not something that they give a fig for. Otherwise, how could Microsoft even dream of putting into public space such a massive data collection facility as was their Copilot v1.0?

 

[bluecoast]

Not good but even if you have chat history off etc you should probably not be sharing anything remotely personal with chat gpt

 

[nt5672]

Not good but even if you have chat history off etc you should probably not be sharing anything remotely personal with chat gpt

Or under NDA, or proprietary information, or company intellectual property.

 

[phenste]

remind me again why sandboxing on the Mac App Store is bad? 😑

makes me wonder if distribution of the ChatGPT app across Apple platforms was discussed during their deal. kinda surprised Apple wouldn’t strong-arm them into a Mac App Store release of the app so as to fully comply with Apple’s security standards.

 

[mdatwood]

Apps should obviously do better, but if someone installs a rogue app or an attacker has physical access to the unlocked computer then it's safe to assume everything is already lost.

 

[Squuiid]

One has to wonder about the security posture of everything else they do. This was careless and sloppy.

 

[Ma2k5]

Aside from being a massive security risk, this so-called Artificial Intelligence is nothing more than a disguised coup to manipulate public opinion, censor free thought by eliminating what they consider to be opposed to their desired schematic and also ultimately to insidiously monitor everybody's activity. Of course they will profess otherwise and efforts will be seen to create privacy, but as we see in these initial stages, first with Microsoft and now others including this, their prime intentions are not security based, our privacy is not something that they give a fig for. Otherwise, how could Microsoft even dream of putting into public space such a massive data collection facility as was their Copilot v1.0?

With that reach you couch become a boxer.

 

[JippaLippa]

Great to know...

 

[JippaLippa]

remind me again why sandboxing on the Mac App Store is bad? 😑

makes me wonder if distribution of the ChatGPT app across Apple platforms was discussed during their deal. kinda surprised Apple wouldn’t strong-arm them into a Mac App Store release of the app so as to fully comply with Apple’s security standards.

Yeah.
I'd expect this especially now, after the recently announced collaboration between the companies.

 

[lkrupp]

"The ChatGPT Mac app is available solely through OpenAI's website, which is why it has not been obligated to follow Apple's sandboxing requirements that apply to software distributed via the Mac App Store."

But, but, but walled gardens are evil and anticompetitive. Waiting for something like this from a third party iOS app “store”.

 

[now i see it]

We haven’t seen nothing yet. This is just the tip of the iceberg

 

[YourBoss]

I only believe when I see it.
Me seeing: I don't believe it!

 

[madmax14304]

If this isn’t enough reason to delete this app, then lacking the option to disable the menu bar icon should enough.

 

[Riovfo]

Time for apple to finally go full privacy and ban sideloading on all platforms. Its dangerous out there

 

[Mac Fly (film)]

To be fair, ChatGPT is a useful tool:

 

[AlexJaye]

Aside from being a massive security risk, this so-called Artificial Intelligence is nothing more than a disguised coup to manipulate public opinion, censor free thought by eliminating what they consider to be opposed to their desired schematic and also ultimately to insidiously monitor everybody's activity. Of course they will profess otherwise and efforts will be seen to create privacy, but as we see in these initial stages, first with Microsoft and now others including this, their prime intentions are not security based, our privacy is not something that they give a fig for. Otherwise, how could Microsoft even dream of putting into public space such a massive data collection facility as was their Copilot v1.0?

You’re right. AI like ChatGPT obviously have leaning bias in 1 direction that is influenced by the creators … and look who they are.

All people have to do is ask ChatGPT what and how to think about things and voila, ideology lectures 101. AI like Google’s is already pretending to rewrite historical facts.

 

[Bustycat]

Finally an advantage of staying with Intel Macs