Apple announced changes to its macOS full-disk access permissions framework, citing concerns that developers are using the system-level privilege in ways that could expose user data without adequate awareness or consent. The company stated that some developers are leveraging full-disk access to access files, email, messages, and browsing history across users’ systems, and that this risk becomes more acute as AI agents grow more autonomous and capable.
The announcement follows a recent incident in which Meta’s general-purpose AI agent Muse sent a notification to a technology columnist referencing a private message thread without the user believing he had granted such permissions. The incident prompted widespread social media discussion about the risks of granting AI assistants broad access to sensitive personal information. Meta’s Chief Technology Officer responded by asserting that accessing Apple Messages through Muse requires users to manually enable both full-disk access and a Messages connector setting within the application.
However, macOS security experts questioned Meta’s assertion, noting that full-disk access inherently permits applications to read all non-root files on a system, including messages and browsing history. Apple’s statement appeared to address this technical reality, emphasizing that users may not fully understand the implications of granting such broad permissions. The company committed to ensuring users have clearer information about privacy risks before authorizing full-disk access.
The announcement comes amid broader concerns about Muse’s operational practices. Earlier, a security researcher disclosed a vulnerability in Muse’s configuration that could allow attackers to assume control of the assistant and access its granted resources. Additionally, Amazon removed Muse from its platform, citing concerns about the application’s approach to respecting platform policies.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI