OpenAI’s New ChatGPT Search Chrome Extension Raises Concerns Over Search Hijacking
OpenAI has recently launched a new Chrome extension called “ChatGPT Search,” which has sparked concerns about it acting similarly to a search hijacker by altering Chrome’s default search settings. The extension reroutes address bar searches through ChatGPT Search instead of the user’s preferred search engine, raising eyebrows among cybersecurity experts and users alike.
Launch of ChatGPT Search
On the previous day, OpenAI unveiled its innovative AI search product, “ChatGPT Search.” This tool aims to provide real-time answers to conversational queries directly on the platform. According to OpenAI’s announcement, “ChatGPT can now search the web in a much better way than before. Users can obtain fast, timely answers with links to relevant web sources, which previously required a traditional search engine.” This new feature blends the advantages of a natural language interface with the benefits of accessing up-to-date information such as sports scores, news, stock quotes, and more. ChatGPT determines when to search the web based on user queries or allows users to manually initiate a search by clicking the web search icon.
Limited Initial Rollout
The new feature is currently being tested with ChatGPT Plus and Team users, with a broader rollout planned for the coming weeks. OpenAI has also released the “ChatGPT Search” Chrome browser extension, which makes ChatGPT the default search engine when users perform searches from the Chrome address bar. The extension redirects all searches through the “https://chatgpt.com/?q=” URL, essentially replacing the user’s usual search engine with ChatGPT Search.
Promotion and Reception
OpenAI CEO Sam Altman has enthusiastically promoted the extension on X (formerly Twitter), encouraging everyone to subscribe to ChatGPT Plus and install the extension, describing it as “really good.” However, cybersecurity researcher Tal Be’ery has pointed out that the extension’s functionality is rather limited. Its primary function is to change the Chrome address bar search to use ChatGPT Search, which feels reminiscent of a typical search hijacker, a category of extensions often found on the Chrome Web Store. While this particular extension appears harmless, it raises concerns about the potential for developers to introduce privacy-compromising features in the future.
Alternative to Installing the Extension
For those who wish to use ChatGPT Search without installing the extension, there is an alternative method. Users can create a new search engine within Chrome to direct their searches to ChatGPT. This can be done by navigating to Settings > Search engine > Manage search engines and site search. From there, users should scroll down to “Site Search” and click the “Add” button. A dialogue box will appear, prompting users to fill in the necessary information to create a search shortcut. Once users save the shortcut, they can click the three vertical dots next to the newly created ChatGPT Search and select “Make default,” which moves it to the top of the search engine list.
Practical Considerations
By setting up this shortcut, users can type their search query into the address bar and press enter, sending the request to ChatGPT for an answer. Although there is no inherent risk in using the ChatGPT Search extension, it offers minimal added value compared to simply creating a shortcut. Additionally, installing numerous extensions in Chrome can increase the browser’s resource consumption and potentially cause conflicts, making it advisable to limit the number of installed extensions.
In summary, while OpenAI’s ChatGPT Search extension introduces a novel way to perform web searches using conversational AI, it also raises concerns about search hijacking and the potential for future privacy issues. Users can achieve similar functionality without the extension by configuring Chrome settings, avoiding unnecessary complications associated with additional extensions.
