4 ms·
ChatGPT's much-heralded Mac app was storing conversations as plain text
- meisel 2y agoHow uncommon is it for apps to store sensitive data in this way? It wouldn’t surprise me if this is a pretty common, albeit non-ideal, practice. For example, where does chrome store browsing history data?
- mrtesthah 2y agoI literally don't know of any app that automatically encrypts its own data aside from those that make it a selling point to do so. For the most part that's completely unnecessary and redundant, as it's handled automatically by the file system when FileVault is enabled.
- diebeforei485 2y agoMost apps store data in a sandbox so other apps can't access it.
- ErikBjare 2y agoMost of the apps I use on macOS certainly don't.
- buffington 2y agoHonest question from someone who isn't an expert: why would they need to encrypt that data on my machine? If the concern is that someone might gain access to my computer and see unencrypted things, what about all of the other things on my machine that aren't encrypted?
- ponty_rick 2y agoProbably a concern that other apps can access this data? Anyway, pretty much every app outside the App Store stores data this way so I don't know what to make of that.
- jki275 2y agoI don't see it as a concern. I've got FileVault turned on anyway, if I didn't care I wouldn't bother with that.
- jug 2y agoDon't rely on apps to enforce encrypted data at rest if you're dealing with local data that would lead into problems if e.g. your laptop is stolen. This is already a solved problem with FileWarden, BitLocker, LUKS etc. and commonly enforced in corporate environments through group policies too...
- fragmede 2y agoAnd also macOS' FileVault .
- __jonas 2y agoWeird headline, I don’t think “plain text” is the issue here, it’s rather that they opted out of storing data in a location protected by macOS app sandboxing, which is a little odd from how I understand, but not terribly uncommon. I would absolutely never expect an App to encrypt data it stores locally on my computer, would be kinda nice if they would make use of the built-in file access protections macOS has though.
- deleted 2y ago[deleted]
- ilrwbwrkhv 2y agoThis is a pointless hit piece. There is no expectation of encrypted data storage for a desktop app. Now if they were not keeping data safely on their servers, now that's another matter.
- deleted 2y ago[deleted]
- deleted 2y ago[deleted]
- redserk 2y agoArsTechnica has been resorting to increasingly alarmist headlines to the point where many articles should be regarded as spam as they don't serve to inform nor provoke any meaningful discussion. Their selection of reporting over the last two years has been centered around pieces that do great for flamebait comment sections across several sites, not much for reasonable discourse. As far as the concerns raised here, my browser history is substantially more sensitive and is in the clear.