ChatGPT Desktop Turns Activity into Local Codex Memories
This episode breaks down how the latest macOS ChatGPT app update turns desktop activity into local Markdown memories using accessibility event streams and an ephemeral Codex session. It also covers opt-in privacy controls, plain-text storage risks, prompt injection concerns, and the looming deadline to migrate authenticated sessions off older GPT models.
Chapter 1
Turning Desktop Activity into Local Codex Context with Computer History
Ethan Park
So I was looking at the August thirteenth update for the macOS ChatGPT desktop app, and... it completely flips how desktop context works. Instead of taking full screen recordings like Chronicle used to do, it uses macOS accessibility APIs to listen to interaction event streams.
Maya
Wait, accessibility APIs? So it is not taking screenshots at all anymore, right?
Ethan Park
Zero screenshots. It is just raw OS interaction events. Things like window switches, keyboard shortcuts, and specific UI events. And... um, thanks to Jellypod for helping us bring this daily show to life, by the way. But yeah, those raw interaction streams get buffered locally in the ChatGPT App Group for up to forty eight hours.
Maya
Forty eight hours in the local App Group buffer. And then what, an ephemeral Codex session reads through that buffer?
Ethan Park
Exactly. An ephemeral Codex session runs in the background and condenses all those raw events into plain text Markdown memories. And it saves them locally under tilde slash dot codex slash memories slash extensions slash skysight.
Maya
Tilde slash dot codex slash memories slash extensions slash skysight. Okay, so it turns two days of clicking around into simple text files sitting right in your home directory.
Ethan Park
Right! And because those Markdown memories exist, you can ask Codex things like, hey, what PR draft was I looking at right before my last break? Or you can even ask it to spot repeated multi app sequences across your afternoon and turn them into a reusable SKILL dot md file.
Maya
Okay, a SKILL dot md file generated automatically from my UI habits sounds super useful, but... uh, is this thing turned on for everybody by default?
Ethan Park
No, it is strictly opt in. It is off by default, and it requires a Pro plan, or an admin enabled Business or Enterprise plan with Memories toggled on. Plus, you can manage fine grained app or domain exclusion filters if you go into Settings, then Computer history, then Permissions.
Maya
That makes sense. Keep sensitive apps completely out of the stream right at the permission layer.
Chapter 2
Security Risks Local Storage Caveats and Model Deprecation Deadlines
Maya
Though... mm, speaking of sensitive stuff, if accessibility APIs are reading text off my screen from window switches or terminal logs, does that open up indirect prompt injection risks?
Ethan Park
It definitely does. If you open a web page, a Slack message, or a terminal log that contains malicious prompt instructions, those interaction streams capture that text. When the background Codex summarization run triggers, it processes those untrusted strings as part of your context stream.
Maya
Wow. So a malicious string in a public chat room could try to hijack the background summarization run?
Ethan Park
It could try. And remember those output files under tilde slash dot codex slash memories slash extensions slash skysight are completely unencrypted plain text. Any other local user process running on your machine can read them. So if you are pulling up private keys or sensitive client data, hitting pause in the macOS menu bar is pretty much essential.
Maya
Pause it from the menu bar immediately, yeah. That plain text point is a huge detail to keep in mind.
Ethan Park
Oh, and if you are running authenticated Codex sessions, you have a hard deadline coming up on August thirty first. Models gpt five point four and gpt five point four mini are being fully retired from ChatGPT authenticated sessions.
Maya
August thirty first? So everyone using gpt five point four needs to update their workspace configs right now?
Ethan Park
Yeah, you need to migrate your workspace defaults over to gpt five point six terra or gpt five point six luna before the end of the month, or your API sessions will break.
Maya
Got it. Swap to gpt five point six terra or luna before August thirty first.
Ethan Park
Exactly. They also quietly rolled out Daybreak Blue and Daybreak Red access tiers for authorized defensive security workflows, which add automatic review boundary rules whenever you execute code in the sandbox environment.
Maya
Alright, so filter your permissions, check your local Markdown files, and update those model strings before month end. Good chat, Ethan.