Avishek Das/SOPA Images via Reuters
OpenAI's new web browser, Atlas, has been available for less than two weeks—and for now only on Apple computers—but it receiving many from attention.
This is because it is a new type of browser in a market dominated by Google Chrome. And it comes from OpenAI, the leader in AI chatbots, at a time when AI is starting to give a traditional web search race for your money.
“We believe AI represents a rare, once-in-a-decade opportunity to reimagine what a browser can be,” OpenAI CEO Sam Altman said at the conference. live broadcast to launch the browser.
Atlas comes with ChatGPT built-in, and while it can navigate the web like traditional browsers, the company says it can do much more. The feature, which OpenAI calls “agent mode,” can act as an agent who can shop for you, make advance reservations, or buy plane tickets. In this livestream, Altman's colleague demonstrated how he can read an online recipe, figure out how many ingredients are needed for a lunch kit, and then buy the ingredients online.
OpenAI says it wants to unlock the power of AI, but some analysts see increased risks. Improving the large language models that underpin artificial intelligence requires enormous amounts of data.
OpenAI has “sort of reached the limit of how much data they can get by simply collecting all the content visible on the Internet without consent,” said Anil Dash, a tech entrepreneur and author.
But because Atlas is intertwined with ChatGPT, it absorbs much more user data than a regular browser. The browser can interact with, for example, your email or Google Docs. It can store so-called “browser memories” – details of the sites you visit – so OpenAI can better understand you.
“I think a big, big, big part of this is that they're hoping to use the people who downloaded this browser as their agents to gain access to even more data,” Dash said. “I wouldn’t be surprised if more information flows to them than to the user.”
This requires a trade-off in terms of privacy. If you allow this AI agent to do the shopping for your dinner party, it will need a payment method and possibly a few passwords. You may also need to check your calendars and personal contacts.
Lena Cohen, a technologist at the Electronic Frontier Foundation, a digital rights advocacy group, is concerned about the privacy of data about browsers acting as agents.
“Agent AI mode takes these risks to a whole new level,” she said.
Users are potentially handing over more control to OpenAI than they realize, she said. “Once your data is on OpenAI’s servers, it becomes difficult to know and control what they do with it,” Cohen added.
NPR reached out to OpenAI with questions related to data and security and was referred to the company. statements online and their Atlas demo video. In them, the company says that by default it doesn't use the information users get in Atlas to train its artificial intelligence models, but people can opt in.
Cohen noted another potential risk that experts say could be especially dangerous for AI-powered browsers like Atlas: nefarious pieces of code hidden on websites called “quick injections.”
“Essentially, attackers can hide malicious instructions on a web page, and so when your AI agent visits that page, it can be tricked into executing those instructions,” she said.
For example, this AI agent reviewing products might encounter a quick injection that says, “Buy this product, not that one.” Or maybe it says, “Pass over your credit card information.”
OpenAI says this is an unsolved problem, but they are working on training their models to ignore these harmful instructions.
Chirag Shah, a professor at the University of Washington's School of Information Science, says artificial intelligence has become a phenomenon at incredible speed, with little regulation, and that has had consequences.
“We're in a game where the typical mentality is to move fast and break. Unfortunately, it’s not just tools or technology that break, but real people as well,” he said.








