ChatGPT Users on macOS Shocked by Unencrypted Chat Storage Issue

The partnership between Apple and OpenAI faced a significant setback as ChatGPT users on macOS discovered their conversations were stored in plain-text files, unencrypted. Although the issue has since been resolved, it raises serious questions about how such an oversight occurred.

Incident Overview:

• Initial Discovery: Data and electronics engineer Pedro José Pereira Vieito revealed in a Meta’s Threads post that ChatGPT on macOS was storing conversations in plain-text files. This meant anyone with access to the computer, either physically or via remote attack, could read these chat logs.

• Privacy Concerns: Apple, known for its stringent privacy measures, including the "sandboxing" feature that encrypts data by default, was criticized for allowing this vulnerability. The issue arose because the ChatGPT app was distributed solely through OpenAI’s website, bypassing Apple’s App Store and its security protocols.

Security Implications

Until July 5, all ChatGPT chat logs on macOS were stored unencrypted, exposing them to potential malware or phishing attacks. Users who accessed the app between its release in May and the fix date were at risk. This oversight shocked many users, with one, GeneralLex, commenting on The Verge about finding unencrypted text files in their computer’s memory.

Root Cause and Resolution

Pedro José Pereira Vieito suggested that OpenAI opted out of Apple's sandboxing protections, storing conversations in plain text to facilitate easy access for development purposes. According to OpenAI’s terms of use, users must opt-out to prevent data sharing, but this doesn't excuse the lack of encryption.

Outstanding Questions

The primary question remains: Why did this happen? While we understand how it occurred and that it has been resolved, the reasons behind these decisions by both OpenAI and Apple are unclear. OpenAI likely intended to streamline access to chat logs for further development, but why didn’t Apple intervene to protect user data before the app went live?

Response and Industry Impact

Cointelegraph reached out to both OpenAI and Apple for comments, but no immediate responses were received. This incident has sparked a broader conversation about data security and the responsibilities of tech companies in protecting user privacy.

Conclusion

The unencrypted storage of ChatGPT conversations on macOS has highlighted significant lapses in data security practices by both OpenAI and Apple. As the tech industry continues to evolve, ensuring robust security measures and transparent communication with users will be crucial in maintaining trust and safeguarding sensitive information.