🔒Apple Tightens macOS Privacy to Block Full Disk Access Misuse
Apple restricts Full Disk Access to protect user data
TL;DR
Apple is changing macOS privacy settings to prevent third-party apps from misusing Full Disk Access, following an incident with Meta's AI assistant Muse. Developers must now clearly inform users of risks before granting access to sensitive data.
Apple is tightening macOS privacy settings to prevent misuse of Full Disk Access, following a recent incident with Meta's AI assistant Muse. The change comes after a tech columnist reported that Muse sent an unsolicited notification referencing a private thread on Apple Messages. Muse can only read Messages content if Full Disk Access is granted and the Messages connector is enabled, highlighting the risks associated with such permissions. The update ensures users understand the risks before granting access to sensitive resources. This is a critical move for developers and users, as Full Disk Access can expose everything on a system, including browsing history, browser cookies, chats, and more. Apple's announcement came 11 days after a security expert disclosed a Muse configuration that allowed full control of the AI assistant.
Key Points
Apple is changing macOS privacy settings to prevent misuse of Full Disk Access, following a Muse incident.
Meta's CTO said Muse can only read Messages content if Full Disk Access is granted and the Messages connector is enabled.
The risk of Full Disk Access misuse is growing as AI agents become more capable and autonomous.
Amazon blocked Muse from its platform because all such apps should operate openly and respect service provider decisions.
Developers must now clearly inform users of risks before granting access to sensitive data.
Why It Matters
Developers and users must now configure permissions carefully when using AI assistants like Muse. If you're running an app with Full Disk Access, ensure you understand the risks and only grant access to trusted services. The new settings will protect user data from misuse, but the $0.20/GB-month premium for Full Disk Access only pencils out above ~100K read IOPS per instance, so smaller databases should stay cautious.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.