{
  "id": 1956450,
  "title": "Beyond the Chat Box: OpenAI's OS-level Agent and Its Plaintext Problem",
  "url": "https://urgent.news/2026/08/19/beyond-the-chat-box-openais-os-level-agent-and-its-plaintext-problem",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-19T15:02:30.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/albertomontagnese/beyond-the-chat-box-openais-os-level-agent-and-its-plaintext-problem-3aek"
  },
  "original_language": "en",
  "account": "OpenAI has introduced a new feature called \"Computer History\" for its ChatGPT macOS app, which creates a searchable timeline of user actions by tracking clicks and keystrokes. This allows the AI to have context to act on the user's behalf, but the implementation uses an unencrypted plaintext database of the user's activity, which poses significant security risks. The memory files are stored locally and could potentially be read by any application or process running under the same user account, exposing sensitive information such as API keys, private messages, and customer data. Additionally, the feature's design creates a new surface for prompt injection, as the agent can access the entire digital life of the user as context for future chats. OpenAI has implemented opt-in functionality and some restrictions, but the security burden ultimately falls on the user to ensure no other process on their machine reads the memory files.",
  "summary": "The agent is leaving the chat window and moving into the operating system. OpenAI's new \"Computer History\" feature for the ChatGPT macOS app creates a searchable timeline of your actions by tracking clicks and keystrokes. This provides an agent with the context to act on your behalf, but its implementation—a local, unencrypted, plaintext database of your activity—is a security trade-off every…",
  "key_points": [
    "OpenAI introduces Computer History feature in ChatGPT macOS app",
    "Plaintext database of user activity poses security risks",
    "Feature enables prompt injection through access to user's digital life"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}