Winston Howes

Security at OpenAI

[DANΞ @cryps1s]

Lockdown mode is now available in ChatGPT.

We rolled this out for organizations a few months ago, and now it's available for all users on all plans.

Lockdown Mode is designed to help prevent the final stage of data exfiltration from a prompt injection attack by limiting outbound network requests that could transfer sensitive data to an attacker.

Lockdown mode is not meant for everyone. However, for folks who have an elevated risk profile - due to who they are, what they work on, or the types of data they work with - it's an excellent tool for further securing themselves. This has some tradeoffs on functionality and utility, but for these users, the tradeoff is worthwhile.

Proud to see the team ship another wonderful feature as we continue our journey building the most secure, useful, and safest AI capabilities on the planet.

https://t.co/FPOlXI4YoV

[Drew Hintz @DrewHintz]

@winhowes with Codex implemented and launched this feature in record time. 🚀

[Winston Howes @winhowes]

Codex made it so easy for me to build this across iOS, Android, and web; it’s so crazy how software engineering has changed

[Winston Howes @winhowes]

We launched lockdown mode to all @ChatGPTapp users. For more security conscious users, this gives an extra layer of protection by reducing the risk of data exfiltration from prompt injection attacks.

https://t.co/xgJsrjVCqY

[OpenAI Developers @OpenAIDevs]

Build long-running agents with more control over agent execution.

New capabilities in the Agents SDK:
• Run agents in controlled sandboxes
• Inspect and customize the open-source harness
• Control when memories are created and where they’re stored

[Ari Weinstein @AriX]

So excited to share that we're bringing Computer Use to Codex. Computer Use lets Codex see, click, and type into your Mac apps, with its own cursor.

It's a magical feeling to have agents using your apps in the background, and still get to use your computer at the same time.

[thomas🌦 @zemnmez]

.@OpenAI blog post: Designing Agents to Resist Prompt Injection

We’ve found that prompt injections are evolving to look more like social engineering over time as models get smarter and mitigations need to evolve too.

https://t.co/8VQ3Du1MVh

[Filipe Almeida @filipe_almeida]

🚀 health sync is out

Analyze your health data locally across providers.

It syncs data from Oura, Withings, Hevy, Strava, and Eight Sleep (more coming) into a local database you fully control.

I run it on a cron and use @openclaw to generate daily summaries of my activity and sleep.

https://t.co/FA83ykWyMR

[Atty Eleti @athyuttamre]

We're taking ChatGPT privacy to the next level.

OpenAI is putting together a founding team to bring advanced encryption-based privacy to ChatGPT, the OpenAI API, and our future consumer devices.

If you are an expert in TEEs and E2EE, or a product engineer who cares deeply about privacy, reach out!

[Winston Howes @winhowes]

@autosourcer0 @GladiaLab "almost surely injective"

[Winston Howes @winhowes]

@autosourcer0 @GladiaLab injective on hidden state, not outputs

[Winston Howes @winhowes]

@Endothermia @JustinAngel @GladiaLab A collision just proves that it's not injective, but it doesn't prove that the average case isn't invertible

[Winston Howes @winhowes]

@chaddepue But my point is more broadly the government's actions here are hypocritical to how they talk about Charlie

[Winston Howes @winhowes]

@chaddepue He branded himself (and is widely seen on the left and right) as pro free speech, but the lists (while I get the reasoning) had negative second order effects; good they basically died out. Government pressure on speech though is very different: direct suppression.

[Winston Howes @winhowes]

@chaddepue @enortham @filipe_almeida @antonellasturn Congratulations you two and you're welcome. 🫶🏼

[Winston Howes @winhowes]

@johnpalmer Gpt5pro

[Sam Altman @sama]

GPT-5 rollout updates:

*We are going to double GPT-5 rate limits for ChatGPT Plus users as we finish rollout.

*We will let Plus users choose to continue to use 4o. We will watch usage as we think about how long to offer legacy models for.

*GPT-5 will seem smarter starting today. Yesterday, the autoswitcher broke and was out of commission for a chunk of the day, and the result was GPT-5 seemed way dumber. Also, we are making some interventions to how the decision boundary works that should help you get the right model more often.

*We will make it more transparent about which model is answering a given query.

*We will change the UI to make it easier to manually trigger thinking.

*Rolling out to everyone is taking a bit longer. It’s a massive change at big scale. For example, our API traffic has about doubled over the past 24 hours…

We will continue to work to get things stable and will keep listening to feedback. As we mentioned, we expected some bumpiness as we roll out so many things at once. But it was a little more bumpy than we hoped for!

[Winston Howes @winhowes]

@xwang_lk Version numbers

[Winston Howes @winhowes]

Looks like everyone's excited across the industry this week. Good good