AI is here to help (and hike memory prices), but the latest ChatGPT feature left some users baffled. The desktop app can read your iMessages and, in some cases, reply on your behalf without your permission.
ChatGPT desktop app can now send iMessages
OpenAI launched a new iMessage integration for Macs. | Image by Medium
OpenAI rolled out a ChatGPT integration with iMessage for Mac users this week, and there are some interesting features. The plugin can read your iMessage history, search inside your conversations, and make summaries.
But the more alarming feature is the ability to send messages on your behalf. OpenAI says the feature is behind a safety wall. The outgoing messages require approval from a living, breathing human being.
Two things, though. First, users can turn this safety guardrail off. Second, and much more important, there's a known defect in the system. OpenAI admits that certain tasks can circumvent the approval prompt and basically send messages on your behalf without your permission.
There's no fix at the moment
iMessage is built to be secure but now there's a back door. | Image by Apple
Another interesting fact is that OpenAI openly (pun not intended) admitted the bug in the system, but it seems the company hasn't fixed it yet. Rather than delaying the launch or rolling back the feature until the defect is resolved, OpenAI chose to roll with it and hope for the best.
We don't know what these "certain tasks" are, but I'll be pretty careful about using the plugin and letting ChatGPT in my iMessage app.
Recommended For You
This situation creates a problem and another potential lawsuit. Apple didn't sign up for this; the company spent time and effort making iMessage encrypted and secure. Now, ChatGPT can apparently use an access route or a bug Apple had no idea about. iMessage history is stored locally, and an app with the right macOS permissions can read it.
ChatGPT features are creating a grey area when it comes to privacy. | Image by OpenAI
This case indicates an alarming pattern with AI agents. OpenAI recently added another controversial feature, the ability to log keystrokes and save them unencrypted as plain text. This is a massive security risk, and the new iMessage integration follows the same pattern.
The problem where ChatGPT could potentially text people without your permission is bad enough. But even the summary feature falls into a grey area. The ChatGPT user might agree and give the necessary permissions for iMessages to be read, summarized, and so on. But the other sides in these conversations are the people you've been chatting with. And they didn't agree to have their messages summarized or read by an AI agent.
Our colleagues at The Next Web point out that a single participant in a group chat, who decides to enable the plug-in, could expose the whole thread.
What do you think about ChatGPT reading your private iMessages?
Who reads your messages?
Your private chat might end up on OpenAI servers. | Image by PhoneArena
Another potential privacy violation comes from the way ChatGPT works. Your iMessages might be stored locally and encrypted, but if you give the AI agent rights to read them, they might end up somewhere in the cloud.
The analysis of the messages to produce a summary or generate a response might be sent to OpenAI's data centers for processing. The company doesn't specify whether these features happen locally or they use cloud computing. And this clarification is key when it comes to reading private and encrypted messages.
Apple can't block this one easily
Apple has no easy mechanism of blocking this. | Image by Apple
Apple has not put out an official statement at the time of this writing, but the company can't do much about all this. Apple could tweak the access rights to the iMessage database, but this may result in many other legitimate apps getting locked out.
For the time being, the best course of action is to abstain from using the plugin, but many users are probably oblivious about the potential risks and would give it a spin anyway. What do you think about ChatGPT reading your private conversations?
Six-month unlimited plan is now 57% off
$90
$210
$120 off (57%)
Mint Mobile is now allowing you to get whichever plan you like for either three, six, or 12 months for just $15/mo. If you go for the six-month unlimited service, for instance, you'll now have to pay just $90 upfront instead of $210.
Mariyan, a tech enthusiast with a background in Nuclear Physics and Journalism, brings a unique perspective to PhoneArena. His childhood curiosity for gadgets evolved into a professional passion for technology, leading him to the role of Editor-in-Chief at PCWorld Bulgaria before joining PhoneArena. Mariyan's interests range from mainstream Android and iPhone debates to fringe technologies like graphene batteries and nanotechnology. Off-duty, he enjoys playing his electric guitar, practicing Japanese, and revisiting his love for video games and Haruki Murakami's works.
A discussion is a place, where people can voice their opinion, no matter if it
is positive, neutral or negative. However, when posting, one must stay true to the topic, and not just share some
random thoughts, which are not directly related to the matter.
Things that are NOT allowed:
Off-topic talk - you must stick to the subject of discussion
Offensive, hate speech - if you want to say something, say it politely
Spam/Advertisements - these posts are deleted
Multiple accounts - one person can have only one account
Impersonations and offensive nicknames - these accounts get banned
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts:
New accounts created within the last 24 hours may experience restrictions on how frequently they can
post or comment.
These limits are in place as a precaution and will automatically lift.
Moderation is done by humans. We try to be as objective as possible and moderate with zero bias. If you think a
post should be moderated - please, report it.
Have a question about the rules or why you have been moderated/limited/banned? Please,
contact us.
Things that are NOT allowed:
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts: