102
ChatGPT access to Apple Messages is dangerous and irresponsible (paulfwalsh.substack.com)
submitted 2 days ago by cm0002@europe.pub to c/privacy@programming.dev
18 comments fedilink hide all child comments
top 18 comments
sorted by: hot top new old
[-] XLE@piefed.social 22 points 2 days ago

Articles are getting too redundant thanks to what I'd bet is AI. Not even sure if this one is reading past a couple sentences, which basically repeat what other people have said but slower.

You'd be better off reading this tweet that the author referenced but failed to link.

As Proton put it on [Twitter]:

OpenAI says it runs locally and doesn't build an index. Local execution isn't the same as local processing. The moment ChatGPT summarises a thread or drafts a reply using a hosted model, that content leaves the machine.

Here's a glance at how poor the writing is. Compare this section

“This is no different from email, SMS, Slack or Teams”

It is.

Think Signal, not SMS.

SMS, ordinary email, Slack and Teams don’t provide the same promise of privacy as iMessage, Signal, or Proton, where the service is designed so the provider itself can’t read the end to end encrypted message content.

To this section:

Why iMessage is different

Think Signal, not SMS.

Some people think of Apple Messages as ordinary text messaging, but it’s one application supporting 3 different messaging services: regular SMS, end to end encrypted iMessage and, more recently, RCS.

It's the same thing, said slowly, and said twice. For no reason.

[-] terabyterex@lemmy.world 16 points 2 days ago

the additional problem is that if someone you message with enables it, then your messages (to that person) are uploaded as well

[-] Keilik@lemmy.world 3 points 2 days ago

Somebody in a state that isn’t single-party consent sue over this, I’d be really interested in seeing how far that could go.

[-] GamingChairModel@lemmy.world 2 points 1 day ago

I'm not aware of any state that applies two party consent rules to written communications. As far as I can tell, state wiretap laws only apply to in-person or live voice conversations (like traditional phone calls).

Oregon, for example, is a two party consent state for phone calls but single party consent for electronic communications. Same with Illinois.

Connecticut and Montana don't apply two party rules when the non-recording parties are merely aware that recording is happening, and it seems like a pretty straightforward analysis that everyone knows that the other side keeps text messages on their phone, usually indefinitely.

The nature of email, text messaging, or any other kind of written communication basically makes it impossible to expect the other side not to save a record of the conversation, because that's just how the technology generally works.

[-] Keilik@lemmy.world 1 points 1 day ago

I was curious if it would but it’s the stored communications act instead, which frankly seems a much better case anyways. Theoretically two party consent could maybe cover it, but the law is old and we have others that cover electronic communications anyways.

[-] GamingChairModel@lemmy.world 2 points 22 hours ago

The federal Stored Communications Act is essentially one party consent. It primarily restricts the ability of a service provider (who isn't a party to those communications) to share things with law enforcement or with others, and governs the manner in which governments can compel disclosure of information about communications. None of it restricts an actual party to the communication, though.

[-] nobodysreadingthis@quokk.au 3 points 2 days ago

Literally all the money is invested on one side of this.

[-] LodeMike@lemmy.today 0 points 1 day ago

No. You consented by sending a text message.

[-] terabyterex@lemmy.world -1 points 2 days ago

no, i dont think that applies..you have consented by sending the message. if person a sends a text message to person b saying bad things about person c. i am.pretty sure sibce you sent the message, person b can show person c. i think its because its written.

then again, you can sue over anything. thats civil. (i just realized you said sue)

[-] Keilik@lemmy.world 1 points 2 days ago

In states without single party consent, both/all parties involved have to give consent to have their communications recorded. If one person consents for ChatGPT and the other doesn’t, then it would be a violation unless you specifically tell everyone that all messages going forward will be sent and read by ChatGPT.

At least I’m relatively sure, but something about ChatGPT not being a sentient entity or something might invalidate it but it’s an interesting question.

[-] TheTechnician27@lemmy.world 3 points 2 days ago* (last edited 2 days ago)

That's not true whatsoever. The act of sending a text message is already creating a record on the other device – that's literally the entire point. You can't sue somebody in a two-party consent state because they showed their friend Kevin all of the text messages you sent them, and the same applies to feeding it straight into ChatGPT.

[-] Keilik@lemmy.world -1 points 2 days ago

But it is because by sending messages back and forth shows consent between those parties. If Kevin sees text messages that he was not supposed to and then uses that information for harmful purposes he could be found liable, as clearly that was not the intent or Kevin would have been told himself either in a group message or individually.

It’s not just how the information is gathered but how it is used, and in ChatGPT’s circumstances there’s no other logical use for those messages other than monetization.

[-] TheTechnician27@lemmy.world 3 points 2 days ago* (last edited 2 days ago)

You're making up ad hoc nonsense out of thin air. Literally nothing you're saying is true, and you can't will it into existence just because it's what you want to be true or because it sounds plausible to you. You've cited absolutely nothing to substantiate your point, and the onus is on you because you're the one saying it's against the law.

Incidentally, you haven't even mentioned a state; you're just saying this is true in all two-party consent states, which is fucking wild and shows you have not the faintest idea what you're talking about.

[-] Keilik@lemmy.world 2 points 2 days ago

Looking closer it appears that this would probably fall under the stored communications act, since it relates to electronic messages not intercepted real time and no one has attempted to prove texts would fall under eavesdropping/wiretapping laws, presumably because they are covered under the SCA.

That being said, under 18 USC 2702 “Voluntary disclosure of customer communications or records” I think there’s actually a stronger argument under that law. You would either have to argue that ChatGPT is a provider or that they are an intended recipient, which goes back to my original point about all parties consenting to ChatGPT obtaining the content of their messages.

[-] nobodysreadingthis@quokk.au -2 points 2 days ago* (last edited 2 days ago)

Just cut the sloppers out of your life. They're not people anymore. It's like maga all over again, but not just men and olds.

They won't mind. They have their ai boyfriend to talk to.

[-] CoryCoolguy@lemmy.myserv.one 2 points 1 day ago

The normies are doing what now? 🫩

[-] minorkeys@sh.itjust.works 1 points 1 day ago

We haven't seen anything yet. AI is yet to be granted execution powers to most of the digital world and soon that will one day change, and without proper safeguards.

[-] 9tr6gyp3@lemmy.world 8 points 2 days ago* (last edited 2 days ago)

Oh man, just wait until Apple rolls out their built-in co-Gemini app next month for their os27 releases. Im sure everything is going to stay super locked down and wont escape their Private Cloud Compute at all.

this post was submitted on 24 Aug 2026
102 points (95.5% liked)

Privacy

5058 readers
179 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 3 years ago
MODERATORS
Ategon@programming.dev
danielintempesta@programming.dev