Back to home

Compare

Comparing: ChatGPT Desktop Enters 'Always-On Observation' Mode & ChatGPT 桌面端开"全时观察"模式

AEN
openaichatgptdesktop·

ChatGPT Desktop Enters 'Always-On Observation' Mode

01 Trigger Event

OpenAI has launched the Computer History feature on the macOS version of the ChatGPT desktop application, in opt-in mode. It continuously records user clicks and keystrokes, building an activity timeline that both ChatGPT and Codex can reference in subsequent requests. Product lead Ari Weinstein confirmed on X that the system automatically ignores incognito / private browsing content, users can manually exclude specific apps and websites, and individual entries can be deleted.

Source: The Verge. I haven't personally tested this feature on macOS — the analysis below is based on publicly available information.

02 What This Really Means

The question isn't that OpenAI added a productivity feature — it's that OpenAI is running a dual flywheel of distribution + training data, and this time spinning both directions simultaneously.

Surface narrative: Make ChatGPT understand your workflow better and deliver more accurate suggestions. Underneath:

  • Product dimension: Computer History feeds Codex, upgrading the agent from "waiting for your command" to "seeing where you're stuck and proactively stepping in." This is a completely different species from Anthropic's Claude Code / Cursor's agent loop.
  • Data dimension: Users' long-term click + keystroke streams are a gold mine for fine-tuning agents. OpenAI pushed the o-series / GPT-5 series toward agents in 2024; now they're going back to build the data infrastructure.

This is in the same lineage as Ben Thompson's aggregation theory. Google became the gateway to the internet through Chrome + Search; now OpenAI wants to become the gateway to your entire digital life through the desktop app. Once Computer History accumulates months of context, the switching cost of moving to Claude / Gemini rises sharply — not because of model capability differences, but because your workflow memory isn't there.

03 Historical Analogy

The most direct comparison is Microsoft Recall from June 2024. Recall was designed as opt-out with screenshot-level surveillance, was besieged by the security community and media, and Microsoft was forced to delay it, remove screenshots, and add BitLocker encryption. A year later, adoption remains dismal.

OpenAI clearly absorbed that lesson:

  • opt-in rather than opt-out
  • ability to exclude specific apps / websites
  • supports entry-level deletion
  • automatically skips incognito

This is more sophisticated privacy design. But Recall's lesson has a second half: even with the design done right, the category itself still has a trust threshold. Users' instinctive resistance to "AI watching you continuously" won't disappear just because it's opt-in.

A further analogy is Google Now from 2012. Back then, Google used Gmail / Calendar / Search / Location to assemble an ambient assistant, hyped as "the next stop after search." The result: Google Now was replaced by Assistant, Assistant by Gemini. The reason: data flywheels sound great in theory, but the daily driver product experience is extremely hard to build.

Whether OpenAI will repeat this misstep is the real question to answer over the coming year.

04 What This Means for AI Builders

Decisions to make this week:

  • Product positioning: If you're building a productivity / dev tool on macOS, your users now face a control group of "AI already sees everything." Your counter-positioning can be local-only / no activity stream uploads — this has leverage in privacy-sensitive industries like legal / healthcare / finance.
  • Exclude list audit: Assess whether your app / website will be actively excluded by users. If so, it means OpenAI's AI can't see your users using your product — that's a data disadvantage in itself.

To observe this quarter:

  • Codex's agent capabilities will climb rapidly because OpenAI is building closed-loop real user behavior data — this data line Anthropic and Google can't close in the short term.
  • The Agent SDK war will further bifurcate: closed-source labs get real user behavior data; the open-source camp (Qwen / DeepSeek / Llama) can only rely on synthetic + public corpus. This gap will widen in the agent category because agent training depends most heavily on real environment interaction data.
  • The protocol layer — MCP / A2A / OpenAI Apps SDK — will gain a new dimension of local timeline: future agent-to-agent negotiation will not only be about tool calls, but also about "can I read your computer history."

One concrete build idea: even if your product has a small user base, vertical depth behavioral data has value. An agent focused on legal / design / gaming, even with only a few thousand power users, accumulates click streams worth more than generic crawler data.

05 Counterarguments

I may have misjudged in the following areas, listing them:

First, users simply won't turn this feature on. Recall's story reminds me that even with sufficiently sophisticated privacy design, users' trust threshold for "AI watching me constantly" remains high. Computer History's opt-in model means most users will keep it off, and the real data volume OpenAI gets may be far lower than my assumption.

Second, I'm overweighting the training data flywheel. Directly using user clicks / keystrokes to train the next generation of models faces significant restrictions under the EU AI Act and various state privacy laws. This feature may only exist in a product-layer personalization loop and won't flow back into pretraining / fine-tuning datasets. I haven't seen OpenAI publicly confirm this, and may have misjudged.

Third, macOS sandbox is a hard constraint. Apple's restrictions on accessibility / keystroke hooks are stricter than Windows. Computer History's actual observation depth on macOS may be far less than Recall's free run on Windows. If so, its strategic value to OpenAI would be substantially diminished.

Fourth, I'm overestimating switching cost. The real moat isn't data, it's workflow integration. Users change computers / change accounts / clear storage, and accumulated data disappears. Anthropic / Google wanting to use similar local timeline features (Google has been doing parts of this with Pixel / Chrome for a while) doesn't face insurmountable barriers. The switching cost OpenAI builds here may not be as thick as imagined.

Final point: I haven't actually run Computer History on macOS. All my UX experience judgments above are extrapolated from reporting. If the experience is poor (lag / battery drain / false triggers), the entire flywheel narrative extinguishes early. This needs to be revised after the first wave of user feedback.

BZH
openaichatgptdesktop·

ChatGPT 桌面端开"全时观察"模式

01 触发事件

OpenAI 在 macOS 版 ChatGPT 桌面应用上线 Computer History 功能, opt-in 模式, 持续记录用户的点击和按键, 构建一条活动 timeline, ChatGPT 与 Codex 在后续请求中都可以引用。产品负责人 Ari Weinstein 在 X 上确认, 系统会自动忽略 incognito / 私密浏览内容, 用户可手动 exclude 特定 app 和网站, 也可逐条删除。

来源 The Verge 报道。我没在 macOS 上实测过这个 feature, 下面是基于公开信息做的判断。

02 这事的真正含义

问题不在 OpenAI 加了一个 productivity feature, 而在 OpenAI 在做 distribution + training data 的双重 flywheel, 而且这次是同时向两个方向转。

表面叙事: 让 ChatGPT 更懂你的工作流, 给出更精准的 suggestion。 底下那层:

  • Product 维度: Computer History 喂给 Codex, 等于把 agent 从 "等你下指令" 升级成 "看见你卡在哪, 主动接上"。这跟 Anthropic 的 Claude Code / Cursor 的 agent loop 完全是两个物种。
  • Data 维度: 用户长期的 click + keystroke 流, 是 fine-tuning agent 的金矿。OpenAI 在 2024 年把 o-series / GPT-5 系列往 agent 方向推, 现在回头补 data infrastructure。

这跟 Ben Thompson 讲的 aggregation theory 一脉相承。Google 通过 Chrome + Search 成为上网入口; 现在 OpenAI 想通过 desktop app 成为你整个数字生活的入口。一旦 Computer History 积累了几个月上下文, 用户切到 Claude / Gemini 的 switching cost 急剧上升 — 不是模型能力差异, 是 你的工作流记忆不在那里了

03 历史类比

最直接的对照是 2024 年 6 月 Microsoft Recall。当时 Recall 设计成 opt-out、截图级别监控, 被安全社区和媒体围剿, 微软被迫推迟、删截图、加 BitLocker 加密。一年后 adoption 依然惨淡。

OpenAI 显然吃掉了这个教训:

  • opt-in 而非 opt-out
  • 可排除特定 app / 网站
  • 支持条目级删除
  • 自动跳过 incognito

这是更老练的隐私 design。但 Recall 的教训还有下半句: design 做对了, 品类本身 仍有信任门槛。用户对 "AI 持续观察你" 的本能抵触, 不会因为 opt-in 就消失。

更远一层的类比是 2012 年的 Google Now。当年 Google 用 Gmail / Calendar / Search / Location 拼出 ambient assistant, 被吹成 "搜索之后的下一站"。结果 Google Now 被 Assistant 取代, Assistant 被 Gemini 取代。原因是: data flywheel 听起来美好, 但 daily driver 的产品体验极难做。

OpenAI 这次会不会重蹈覆辙, 是后面一年真正要回答的问题。

04 对 AI builder 意味着什么

这周要调的决策:

  • 产品定位: 如果你在做 macOS 上的 productivity / dev tool, 你的用户现在面对一个 "AI 已经在看一切" 的对照组。你的反向定位可以是 local-only / 不上传活动流, 在 legal / healthcare / finance 这种 privacy-sensitive 行业是有杠杆的。
  • Exclude list 审计: 评估你的 app / 网站是否会被用户主动 exclude, 如果是, 意味着 OpenAI 的 AI 看不到你的用户在用你的产品, 这本身就是数据劣势。

这个季度要观察的:

  • Codex 的 agent 能力会快速爬升, 因为 OpenAI 在构建 closed-loop 的真实 user behavior data, 这条数据线 Anthropic 和 Google 短期内补不上。
  • Agent SDK 的战争会更分化: 闭源 lab 拿真实用户行为数据, 开源阵营 (Qwen / DeepSeek / Llama) 只能靠 synthetic + public corpus。这个差距在 agent 这个品类上会越拉越大, 因为 agent 训练恰恰最依赖真实环境交互数据。
  • 协议层的 MCP / A2A / OpenAI Apps SDK 这条线, 会被 本地 timeline 这个新维度加一层: 未来 agent 之间的 negotiation, 不只是工具调用, 还包括 "我能否读取你的 computer history"。

一个具体的 build idea: 即使你的产品用户量小, 垂直深度 的 behavioral data 也有价值。一个专注在法务 / 设计 / 游戏的 agent, 即便只有几千重度用户, 积累下来的 click stream 也比通用爬虫数据更值钱。

05 反方观点

我可能在以下地方判断错了, 列出来:

第一, 用户根本不会打开这个 feature。Recall 的故事提醒我, 即便 privacy design 做得足够老练, 用户对 "AI 一直看着我" 的信任门槛依然很高。Computer History 的 opt-in 模式意味着大部分用户会保持关闭, OpenAI 拿到的真实 data 量可能远低于我的假设。

第二, training data flywheel 我想得太重。用户 click / keystroke 直接拿来训练下一代模型, 在 EU AI Act / 各州隐私法下限制非常多。这个 feature 很可能只在 product 层的 personalization 闭环, 不会回流到 pretraining / fine-tuning 数据集。这一点我没看到 OpenAI 公开确认, 可能是误判。

第三, macOS sandbox 是硬约束。Apple 对 accessibility / keystroke hook 的限制比 Windows 严得多。Computer History 在 macOS 上的实际观察深度, 可能远不如 Recall 在 Windows 那种 free run 的程度。如果是这样, 它对 OpenAI 的战略价值会大打折扣。

第四, switching cost 被我高估。真正的 moat 不是 data, 是 workflow integration。用户换电脑 / 换账号 / 清理 storage, 积累就消失了。Anthropic / Google 想用类似的本地 timeline 功能 (Google 的部分 Pixel / Chrome 早就在做), 并不存在不可逾越的壁垒。OpenAI 在这里建立的 switching cost 可能没有想象中那么厚。

最后一条, 我没在 macOS 实际跑过 Computer History, 上面所有关于 UX 体验的判断都是基于报道推导的。如果体验糟糕 (lag / battery drain / 误触发), 整个 flywheel 叙事就提前熄火。这一点要等首批用户反馈才能修正。