OpenAI ditches Recall-style screenshot surveillance for friendly keylogging

OpenAI has introduced a new feature called Computer History that allows users to record their computer interactions across apps and websites. This opt-in feature aims to improve ChatGPT responses and surface automation opportunities. However, this system is essentially a keylogging and event capture system that can increase vulnerabilities to prompt injection attacks.

Computer History captures input events, such as clicks, typing, keyboard shortcuts, app switches, and context from macOS accessibility. It stores these events unencrypted locally for up to 48 hours before sending them to OpenAI servers to generate memories. However, the company warns that these files may contain sensitive information and can be accessed by other running programs on macOS.

While Computer History does not capture screen images, microphone input, or system audio, it still poses a risk of prompt injection from content in apps and websites. The feature is currently available for ChatGPT Pro, Business, and Enterprise users on macOS, but it is not yet available in the European Economic Area, Switzerland, the United Kingdom, or to those accessing ChatGPT via API key or Amazon Bedrock.

OpenAI advises users to turn off the service during communications with others unless they have explicit consent and to exclude sensitive apps containing health, financial, or personal information.