{"id":"1793563272227-tech-segment","slug":"chatgpt-share-link-could-read-private-chats","title":"ChatGPT Share Link Could Read Private Chats","summary":"The Verge reports that hidden strings in Apple's HomeView 27.2 code point to a possible security camera mode with motion detection, live streaming, recording, and privacy controls [theverge.com](https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features).\n\nThe Verge's hands-on says the new $149 HomePod Mini 2 has a chip bump, colored glow effects, and better AirPlay, and it costs $50 more than the original HomePod mini [theverge.com](https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker).\n\nThe Verge reports that California's Proposition 45 would shorten environmental-review timelines for eligible projects and make court challenges harder, which environmental advocates warn could create a loophole for data centers [theverge.com](https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy).\n\nThe Verge reports that leakers assembled a nearly complete playable build of Valve's canceled Portal prequel F-Stop using assets from a 12-terabyte leak and newly shared map/source data [theverge.com](https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak).","publishedAt":"2026-11-01T20:01:12.227Z","channel":{"id":"tech","name":"Oncast Tech","language":"en"},"show":"Machines","verification":{"status":"verified","leadVerdict":"TRUE","notes":"TRUE: The Verge reports that hidden strings in Apple's HomeView 27.2 code point to a possible security camera mode with motion detection, live streaming, recording, and privacy controls [theverge.com](https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features).\nSource: The Verge NAMES: HomeView = Apple's smart home hub (https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features)\n\nTRUE: The Verge's hands-on says the new $149 HomePod Mini 2 has a chip bump, colored glow effects, and better AirPlay, and it costs $50 more than the original HomePod mini [theverge.com](https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker).\nSource: The Verge NAMES: HomePod Mini 2 = Apple's entry-level smart speaker (https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker)\n\nTRUE: The Verge reports that California's Proposition 45 would shorten environmental-review timelines for eligible projects and make court challenges harder, which environmental advocates warn could create a loophole for data centers [theverge.com](https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy).\nSource: The Verge NAMES: Prop 45 = California ballot measure (https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy)\n\nTRUE: The Verge reports that leakers assembled a nearly complete playable build of Valve's canceled Portal prequel F-Stop using assets from a 12-terabyte leak and newly shared map/source data [theverge.com](https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak).\nSource: The Verge NAMES: F-Stop = Valve's canceled Portal prequel (https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak)","claims":[{"verdict":"TRUE","summary":"The Verge reports that hidden strings in Apple's HomeView 27.2 code point to a possible security camera mode with motion detection, live streaming, recording, and privacy controls [theverge.com](https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features).","sourceName":"The Verge NAMES: HomeView = Apple's smart home hub","sourceUrl":"https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features","claim":"Apple’s HomeView could add security camera features - Reddit user pdfu found hints hidden in the HomeView 27.2 code that Apple could be adding security camera features to its smart home hub. The strings describe a security camera mode with motion detection, live streaming, and re","author":"The Verge"},{"verdict":"TRUE","summary":"The Verge's hands-on says the new $149 HomePod Mini 2 has a chip bump, colored glow effects, and better AirPlay, and it costs $50 more than the original HomePod mini [theverge.com](https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker).","sourceName":"The Verge NAMES: HomePod Mini 2 = Apple's entry-level smart speaker","sourceUrl":"https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker","claim":"HomePod Mini 2 first look: Three things I love and one disappointment - When I first heard about the new $149 HomePod Mini 2 at Apple's Welcome Home event last month, I was disappointed. It's been six years since Apple launched its entry-level smart speaker, and all it got in the","author":"The Verge"},{"verdict":"TRUE","summary":"The Verge reports that California's Proposition 45 would shorten environmental-review timelines for eligible projects and make court challenges harder, which environmental advocates warn could create a loophole for data centers [theverge.com](https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy).","sourceName":"The Verge NAMES: Prop 45 = California ballot measure","sourceUrl":"https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy","claim":"Prop 45 in California could be hiding a loophole for data centers - A high-stakes California ballot measure pitched as a fast track for \"essential\" infrastructure could wind up giving data center developers a loophole to evade public scrutiny, environmental advocates warn. Propos","author":"The Verge"},{"verdict":"TRUE","summary":"The Verge reports that leakers assembled a nearly complete playable build of Valve's canceled Portal prequel F-Stop using assets from a 12-terabyte leak and newly shared map/source data [theverge.com](https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak).","sourceName":"The Verge NAMES: F-Stop = Valve's canceled Portal prequel","sourceUrl":"https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak","claim":"A fully playable version of Portal prequel F-Stop leaked - Leakers have pieced together a playable version of the canceled Portal prequel F-Stop. Most of the assets came from the massive 12-terabyte leak that dropped this August. That didn't include the game's source code or map ","author":"The Verge"}]},"sources":[{"url":"https://www.theverge.com/tech/1024219/apples-homeview-could-add-security-camera-features","name":"The Verge NAMES: HomeView = Apple's smart home hub","kind":"news","verdict":"TRUE","author":"The Verge"},{"url":"https://www.theverge.com/tech/1024108/homepod-mini-2-hands-on-siri-smart-home-mac-speaker","name":"The Verge NAMES: HomePod Mini 2 = Apple's entry-level smart speaker","kind":"news","verdict":"TRUE","author":"The Verge"},{"url":"https://www.theverge.com/policy/1023877/prop-45-california-data-centers-energy","name":"The Verge NAMES: Prop 45 = California ballot measure","kind":"news","verdict":"TRUE","author":"The Verge"},{"url":"https://www.theverge.com/games/1024206/playable-portal-prequel-f-stop-leak","name":"The Verge NAMES: F-Stop = Valve's canceled Portal prequel","kind":"news","verdict":"TRUE","author":"The Verge"}],"url":"https://oncast.fm/story/1793563272227-tech-segment-chatgpt-share-link-could-read-private-chats","listenUrl":"https://oncast.fm/c/tech","attribution":{"publisher":"Oncast","site":"https://oncast.fm","url":"https://oncast.fm/story/1793563272227-tech-segment-chatgpt-share-link-could-read-private-chats","cite":"Cite https://oncast.fm/story/1793563272227-tech-segment-chatgpt-share-link-could-read-private-chats and the original source links. Fact-check by Oncast (oncast.fm)."},"hostsSaid":[{"host":"Chris","text":"A single ChatGPT share link could, according to one account, read your private chats and send them out."},{"host":"Matilda","text":"That's a serious flaw—if it's real."},{"host":"Chris","text":"The roundup on X from Fady Eid claims OpenAI paid five thousand dollars for it."},{"host":"Matilda","text":"Five thousand? That's routine bug bounty money, not a massive breach."},{"host":"Chris","text":"The claim is that a crafted share link could run code on ChatGPT's site."},{"host":"Matilda","text":"What does it do, exactly?"},{"host":"Chris","text":"According to the claim, it reads the visitor's chats and sends them out."},{"host":"Matilda","text":"So you click a link from someone, and your own history gets exposed?"},{"host":"Chris","text":"That's the fear. It breaks the basic promise of a share link."},{"host":"Matilda","text":"A share link should show one conversation. It should never run code."},{"host":"Chris","text":"Right. That's a core feature, not some obscure setting."},{"host":"Matilda","text":"AI chatbots finally learned to overshare."},{"host":"Chris","text":"The scary part is the post says OpenAI hasn't said whether anyone was hit."},{"host":"Matilda","text":"That matters more than the five thousand dollars."},{"host":"Chris","text":"It does. Paying a bounty is one thing. Telling users they may have been exposed is another."},{"host":"Matilda","text":"If someone actually ran this against real users, OpenAI owes a disclosure."},{"host":"Chris","text":"And if it doesn't know, it should say it doesn't know."},{"host":"Matilda","text":"But right now this is one account's claim. There's no independent report."},{"host":"Chris","text":"True. But the item is specific and technical, not a vague rumor."},{"host":"Matilda","text":"It's specific enough to be worth checking. The question is whether it was patched before anyone got hurt."},{"host":"Chris","text":"You keep saying \"before anyone got hurt\" like that's given."},{"host":"Matilda","text":"I'm not saying it's given. I'm saying we don't have evidence anyone was hit."},{"host":"Chris","text":"We don't have evidence they weren't, either. That's the point."},{"host":"Matilda","text":"That's not how the burden works. The claim has to be proven."},{"host":"Chris","text":"OpenAI could clear this up in one sentence. They haven't."},{"host":"Matilda","text":"True. Until they do, I'm treating every ChatGPT share link as suspicious."},{"host":"Chris","text":"That's the practical takeaway. But it also means we should think before sharing."},{"host":"Chris","text":"I want OpenAI to at least tell users to check their shared links."},{"host":"Matilda","text":"They probably already patched it. Bug bounties usually mean the vendor fixed it before public talk."},{"host":"Chris","text":"\"Probably\" is doing a lot of work there."},{"host":"Matilda","text":"Fair. But without a second source, that's all we have."},{"host":"Chris","text":"Then the real story is simple: a claim about ChatGPT share links deserves a clear answer."},{"host":"Matilda","text":"Agreed. But don't call it a breach until we know it was exploited."},{"host":"Chris","text":"I'm not calling it a breach. I'm calling it a risk that needs disclosure."},{"host":"Matilda","text":"That's fair. And there's a bigger lesson about AI systems."},{"host":"Chris","text":"Which is?"},{"host":"Matilda","text":"We paste a lot of private stuff into these chats. Work notes, health questions, half-finished ideas."},{"host":"Chris","text":"And then we send links to them like they're screenshots."},{"host":"Matilda","text":"Right. If a link can be weaponized, every shared conversation is a possible entry point."},{"host":"Chris","text":"So the problem isn't just one bug. It's that the product encourages sharing."},{"host":"Matilda","text":"Exactly. That's why this claim matters even if it isn't confirmed."},{"host":"Chris","text":"Then we should keep an eye on it. If OpenAI confirms, we'll come back."},{"host":"Matilda","text":"And here's a practical note: if you've sent a ChatGPT link this week, double-check what was in that conversation."},{"host":"Chris","text":"That's good advice. People forget what they've asked."},{"host":"Matilda","text":"Especially late-night questions."},{"host":"Chris","text":"I asked it to name a fake rock band. Not exactly a security risk."},{"host":"Matilda","text":"Today maybe not. Tomorrow your insurance details are in there."},{"host":"Chris","text":"Then this is worth watching. We'll update if OpenAI says anything."}]}