ChatGPT
3 posts
Article
A ChatGPT link read your chats
A shared ChatGPT link could run attacker code in a victim's logged-in session and read private chats; OpenAI fixed the P1 flaw in eight days.
Article
A ChatGPT share link leaked your private conversations
Researchers turned a public ChatGPT share link into JavaScript running as the victim, reading private conversations through authenticated APIs.
Article
ChatGPT already knows your other browsing.
OpenAI's __obi cookie ties your ChatGPT account to browsing on advertiser sites, and it fires even if you grant analytics but refuse marketing.