Enlarge / The app lets you invoke ChatGPT from anywhere in the system with a keyboard shortcut, Spotlight-style. (credit: Samuel Axon)

OpenAI announced its Mac desktop app for ChatGPT with a lot of fanfare a few weeks ago, but it turns out it had a rather serious security issue: user chats were stored in plain text, where any bad actor could find them if they gained access to your machine.

As Threads user Pedro José Pereira Vieito noted earlier this week , "the OpenAI ChatGPT app on macOS is not sandboxed and stores all the conversations in plain-text in a non-protected location," meaning "any other running app / process / malware can read all your ChatGPT conversations without any permission prompt."

He added:

Enlarge (credit: OpenAI / Apple / Benj Edwards)

On Monday, Apple announced it would be integrating OpenAI's ChatGPT AI assistant into upcoming versions of its iPhone, iPad, and Mac operating systems. It paves the way for future third-party AI model integrations, but given Google's multi-billion-dollar deal with Apple for preferential web search, the OpenAI announcement inspired speculation about who is paying whom. According to a Bloomberg report published Wednesday, Apple considers ChatGPT's placement on its devices as compensation enough.

"Apple isn’t paying OpenAI as part of the partnership," writes Bloomberg reporter Mark Gurman, citing people familiar with the matter who wish to remain anonymous. "Instead, Apple believes pushing OpenAI’s brand and technology to hundreds of millions of its devices is of equal or greater value than monetary payments."

The Bloomberg report states that neither company expects the agreement to generate meaningful revenue in the short term, and in fact, the partnership could burn extra money for OpenAI, because it pays Microsoft to host ChatGPT's capabilities on its Azure cloud. However, OpenAI could benefit by converting free users to paid subscriptions, and Apple potentially benefits by providing easy, built-in access to ChatGPT during a time when its own in-house LLMs are still catching up.

Enlarge / The classic Mac OS wallpaper in macOS 15 Sequoia mimics the monochrome user interfaces used in System 1 through 6. (credit: Apple)

I'm still in the very early stages of poking at macOS 15 Sequoia ahead of our customary review later this fall, and there are quite a few things that aren't working in this first developer beta. Some of those, like the AI features, aren't working on purpose; I am sure some of the iCloud sync issues I'm having are broken by accident.

I've already encountered a few functional upgrades I like, like iCloud support inside of virtual machines , automated window snapping (at long last), and a redesigned AirDrop interface in the Finder. But so far the change that I like the most is actually a new combo wallpaper and screen saver that's done in the style of Apple's Mac operating system circa the original monochrome Mac from 1984. It's probably the best retro Mac Easter egg since Clarus the Dogcow showed up in a print preview menu a couple of years ago.

The Macintosh wallpaper and screen saver—it uses the animated/dynamic wallpaper feature that Apple introduced in Sonoma last year—cycles through enlarged, pixelated versions of classic Mac apps, icons, and menus, a faithful replica of the first version of the Mac interface. Though they're always monochrome, the default settings will cycle through multiple background colors that match the ones that Apple uses for accent colors.

Enlarge / Macs running a preview build of macOS 15 Sequoia. (credit: Apple)

We’ve written before about Apple’s handy virtualization framework in recent versions of macOS, which allows users of Apple Silicon Macs with sufficient RAM to easily set up macOS and Linux virtual machines using a number of lightweight third-party apps. This is useful for anyone who needs to test software in multiple macOS versions but doesn’t own a fleet of Mac hardware or multiple boot partitions. (Intel Macs support the virtualization framework, too, but only for Linux VMs, making it less useful.)

But up until now, you haven’t been able to sign into iCloud using macOS on a VM. This made the feature less useful for developers or users hoping to test iCloud features in macOS, or whose apps rely on some kind of syncing with iCloud, or people who just wanted easy access to their iCloud data from within a VM.

This limitation is going away in macOS 15 Sequoia, according to developer documentation that Apple released yesterday. As long as your host operating system is macOS 15 or newer and your guest operating system is macOS 15 or newer, VMs will now be able to sign into and use iCloud and other Apple ID-related services just as they would when running directly on the hardware.

Enlarge / macOS Mojave's wallpaper. (credit: Apple)

Valve Software's Steam gaming marketplace and app will drop support for macOS 10.13 (High Sierra) and 10.14 (Mojave), according to a support page post . The change will go into effect on February 15, 2024.

What will happen exactly? Valve writes:

After that date, existing Steam Client installations on these operating systems will no longer receive updates of any kind including security updates. Steam Support will be unable to offer users technical support for issues related to the old operating systems, and Steam will be unable to guarantee continued functionality of Steam on the unsupported operating system versions.

macOS 10.14 (dubbed Mojave by Apple) shipped more than five years ago, and time has a way of marching on, so this might not seem that momentous at first glance. But there's a reason it's particularly noteworthy as these things go: this change means the end of support for the last versions of macOS that could run 32-bit games.

Enlarge (credit: Apple)

Apple has released security updates for iOS, iPadOS, macOS, and watchOS today to fix actively exploited zero-day security flaws that can be used to install malware via a "maliciously crafted image" or attachment. The iOS 16.6.1, iPadOS 16.6.1, macOS 13.5.2, and watchOS 9.6.2 updates patch the flaws across all of Apple's platforms. As of this writing, no updates have been released for older versions like iOS 15 or macOS 12.

The CVE-2023-41064 and CVE-2023-41061 flaws were reported by the Citizen Lab at the Munk School of Global Affairs & Public Policy at the University of Toronto. Also dubbed "BLASTPASS," Citizen Lab says that the bugs are serious because they can be exploited just by loading an image or attachment, which happens regularly in Safari, Messages, WhatsApp, and other first- and third-party apps. These bugs are also called "zero-click" or "clickless" vulnerabilities.

Citizen Lab also said that the BLASTPASS bug was "being used to deliver NSO Group’s Pegasus mercenary spyware ," the latest in a long line of similar exploits that have been used to infect fully patched iOS and Android devices.

Enlarge / Macs running macOS Ventura. (credit: Apple)

Apple's iOS 16, iPadOS 16, and macOS 13 operating systems are all due to be replaced with new versions in the next two or three months, but some bugs can't wait for a whole new release. The company has released iOS/iPadOS 16.6 and macOS 13.5 to fix several "actively exploited" security bugs, plus a handful of other security fixes for problems that have been reported to Apple but aren't being exploited in the wild yet. The release notes also mention unspecified "bug fixes" for each OS.

The new updates don't add anything by way of new features—at least, there aren't any mentioned in the release notes. This will likely be the case for most iOS 16 and macOS 13 Ventura updates going forward, as Apple shifts its focus to newer operating systems. The iOS/iPadOS 17 and macOS 14 Sonoma updates should be available in September or October, if Apple sticks to its historical release schedule. The public betas were released earlier this month.

Several of the security fixes in these updates were originally part of a Rapid Response security update for iOS 16.5.1 and macOS 13.4.1. The original version of that update was pulled post-release after it broke a few major websites on devices that installed it, but a working version with the same fixes was released soon after.

Enlarge (credit: Andrew Cunningham)

Apple released its first public beta for macOS Sonoma (among other operating systems) this month, and per usual, headlining features like desktop widgets have gotten a lot of coverage. We'll take a more comprehensive look at the big-ticket items in our review later this fall, but there are always some features and changes worth discussing that get buried or lost in the shuffle. Here are a few deeper cuts we've played with so far.

Better screen sharing

The new Screen Sharing app, which is actually an app and not just a window you type an IP address into. Note the mix of Macs and PCs. (credit: Andrew Cunningham)

Apple first added basic screen sharing support to macOS back in 2007, with version 10.5 (Leopard). Screen sharing did use a dedicated app, but it was hidden in macOS' system folders rather than in the Applications or Utilities folders—it was really only intended to be launched indirectly, either using the Finder or the Connect to Server menu . If you did launch it directly, its interface was a simple "connect to" dialog where you could enter your desired hostname or IP address. Functional, but minimalist.

Screen Sharing in Sonoma revamps the app itself, as well as how the underlying technology works. You'll now find a Screen Sharing app in the Utilities folder (the same place as Terminal, Disk Utility, and others), signaling that Apple has made it a full-fledged app. The new Screen Sharing app looks a bit like a (very) light, feature-limited version of the Remote Desktop management software, with a list of all computers you've connected to in the past, the ability to see all computers on your local network with screen sharing enabled, and the option to create groups of computers so you can easily sort systems based on how you use them.