macOS Codex leaks ChatGPT history by bypassing TCC permissions
mer__edith · x · 2026-08-24
Highlights a security and privacy vulnerability in the macOS version of Codex. Although macOS's TCC mechanism should prevent direct access to Messages contents, Codex stores its history in /Users/$USER/.codex/sessions, allowing users to access sensitive content generated by ChatGPT. This reflects deeper security issues in the current Agent hype, where connecting disparate services threatens to break the barrier between the application layer and the OS layer.
More from coding & agent
- Using 6 Grok Agents to Build a Fully Automated Company Operation — elonmusk · 2026-08-24
- Voice Agent Prompting: 8-Block Structure and Critical Guardrails — DeskCaller_AI · 2026-08-24
- Agent autonomously discovers Apify, sets up wallet, and pays via x402 — markjeffrey · 2026-08-24
- Agent Bubbles RL Exercise: Bytecode VM & Stack Compiler — cephaloform · 2026-08-24
- Default Agent parameter fork_turns=all causes massive transcript copying — chaumian · 2026-08-24
- User finds ~/.codex folder eating hundreds of GBs of space — chaumian · 2026-08-24