Issue 2026-09-20 · Industry · 产品 · 安全

ChatGPT Tracks Off-Site Browsing via Ad Collector

An investigation found OpenAI's bzr.openai.com sets an __obi cookie tied to a user's ChatGPT account; advertiser-site OpenAI code sends it back with browsing data such as products, articles and purchases, letting OpenAI link off-site activity to accounts. The author reproduced the mechanism and observed 936 advertiser pixels across 1,029 hostnames.

Hacker News3 h ago
Read original ↗