Global ChatGPT Failure Reveals Conversations of Millions of Apple Users

In the past few hours, a Threads user explained that the desktop app ChatGPT on Mac computers poses a serious security issue by storing user conversations unencrypted And in an unsafe place on your computer.

This could mean that a malicious person, through a virus, could access users’ interactions with the chatbot.

This issue was discovered by data and electronics engineer Pedro Jose Pereira Vietto on Threads, who noted that chats were stored in the following path: ~/Library/Application\Soporte/com.openai.chat/conve… {uuid}.

“Therefore, any other running app/process/malware can read all your ChatGPT conversations without any permissions,” Pereira wrote.

“macOS has blocked access to any user’s private data since macOS Mojave 10.14 (6 years ago!),” he added. “Any app that accesses a user’s private data (Calendar, Contacts, Mail, Photos, any third-party app testing area, etc.) now requires explicit user access, and OpenAI has opted out of sandboxing and stored conversations in plain text in an unsecured location, disabling all of these built-in defenses.”

Another tech expert commented on the post and said that this vulnerability was a “macOS issue,” as the operating system should avoid this type of situation.

Pereira responded and confirmed that in macOS Mojave 10.14, users must explicitly accept or decline the processing of personal data in apps. also, He added that OpenAI decided to abandon the sandbox and store the conversations in plain text in an unsecured location, thus disabling all built-in defenses.

Pereira discovered the bug when he noticed that the app wasn’t available in the Mac App Store, but only on OpenAI’s page. However, the data engineer revealed some good news.

“The new version of ChatGPT now encrypts local chats. I still hope that in the future they will put the app in a test environment to improve protection,” he said.

Daniela Larraite is the happiest

Edit Digital Domain

the time

More news