ChatGPT Desktop forwards SSH agent to remote machines, enabling credential use
A report indicates that ChatGPT Desktop forwards the user's SSH agent to remote machines, allowing remote agents to authenticate using local SSH credentials. This could enable actions such as pushing to private GitHub repositories from a remote environment.
Coverage timeline
Hacker NewsDenGorbachev
The agent running on a remote machine can authenticate using your local SSH credentials. That means it can push to your private repos on GitHub, for example. Proof: https://github.com/openai/codex/pull/28131#discussion_r3410013180
Related stories
Researchers Earn $5K for ChatGPT Bug Allowing Code Execution via Share Link
Researchers at Parameter Labs reported a ChatGPT vulnerability that allowed attackers to execute code in the logged-in sessions of users who opened a malicious share link. OpenAI paid them $5,000 for the report. The exploit chain involved ChatGPT's sandboxed HTML previews and the MathLive library's postMessage handler, which could be abused to inject HTML into the parent page.
3 reports · 3 sources362 points · 176 comments
OpenAI Chrome extension lets ChatGPT view and use open browser tabs
OpenAI has upgraded its ChatGPT Chrome extension to allow ChatGPT to view and use open browser tabs when users tag Chrome in the ChatGPT web or desktop app. The update brings computer use capabilities to Chrome users, as demonstrated in a video where ChatGPT compares three open tabs showing sofas.
1 reports · 1 sources

OpenAI publishes Signals data on ChatGPT work usage across 165 activities in nearly 100 countries
OpenAI has published Signals, a dataset covering 165 work activities across nearly 100 countries, detailing how people use ChatGPT for work and how usage evolves over time. The data provides insights into the changing patterns of AI adoption in professional contexts.
1 reports · 1 sources
OpenAI to merge ChatGPT Chat and Work tabs on desktop, share usage pool with Codex
OpenAI announced it will merge the Chat and Work tabs in the ChatGPT desktop app, rolling out to select users before a wider release. After the change, ChatGPT and Codex will draw usage from the same allocation pool, while Codex remains a separate experience.
2 reports · 2 sources
News updates every hour. Subscribe in your RSS reader to get new stories automatically.
Subscribe