false memories in ChatGPT

tldr

• it affects the desktop app of chatgpt, but likely any client that features long term memory functionality.
• does not apply to the web interface.
• does not apply to API access.
• the data exfiltration is visible to the user as GPT streams the tokens that form the exfiltration URL as a (fake) markdown image.

I don’t understand. Why can’t ChatGPT be a good bot and keep a secret?

That’s … really bad.