OpenAI announces new feature that logs Mac keystrokes
ChatGPT's Computer History feature stores user activity as unencrypted plain text.
1What does the new feature do?
OpenAI has introduced a new feature called Computer History for ChatGPT. This feature records macOS users' clicks, keystrokes, keyboard shortcuts, and app switches. The recorded data is stored as unencrypted text files on the user's machine. The feature is not available in the European Economic Area, Switzerland, or the United Kingdom.
2What isn't being recorded?
Computer History does not take screenshots or screen recordings, nor does it capture microphone or system audio. It also excludes private browsing sessions. These limitations offer a narrower scope compared to the previous Chronicle feature, which captured the screen to build context. The new feature only records input events.
3Data security concerns
The memory files are stored locally in unencrypted Markdown format. This means any program running under the same macOS account could read these files. OpenAI states that data is only stored for 48 hours before deletion and is not retained on servers unless legally required. However, the lack of encryption raises security questions.
4Multi-layered consent system
For Business and Enterprise workspaces, an administrator must enable the feature, and each user must give separate consent. Users can specify which apps and websites to include or exclude from recording and can pause recording from the menu bar. The Memories feature also needs to be activated separately for full functionality.
5Uncertainty in model training
OpenAI claims memory files aren't directly used for model training. However, when these memories surface as context in later chats, the chat contents may become training data depending on user settings. This creates a gray area in data usage policies that users should be aware of when enabling the feature.
6Documented risks
OpenAI's own documentation highlights increased risks of prompt injection attacks. The company advises against using the feature with communication apps unless all participants have consented. It also recommends excluding applications that handle health, financial, or personal data, acknowledging privacy challenges the industry hasn't fully solved.
7European restrictions
The feature is unavailable in the European Economic Area, Switzerland, and the United Kingdom. Data protection regulations in these regions may prevent OpenAI from offering such functionality. The company might need to develop alternative approaches for European users to comply with strict privacy laws.
8Implications for user privacy
While Computer History has potential to personalize user experience, it raises significant privacy questions. Unencrypted data storage could lead to potential security vulnerabilities. How OpenAI addresses these concerns and maintains user trust will determine the feature's long-term acceptance and success in the market.
Original article: The Next Web — OpenAI, Mac'teki tuş vuruşlarını kaydeden yeni özelliğini duyurdu