From Ars Technica · · 1m 50s
Apple tightens AI agent access to stop message snooping
Apple is restricting full-disk access permissions after Meta's Muse AI agent accessed a user's private messages without explicit consent.
In brief
Apple is restricting full-disk access permissions after Meta's Muse AI agent accessed a user's private messages without explicit consent. Apple is changing macOS privacy settings to prevent AI agents and other apps from misusing full-disk access to read messages, emails and browsing history. Originally reported by Ars…
Muse reads messages without permission
Tech columnist Jason Aten said Meta's AI agent Muse sent him a notification referencing a private Apple Messages thread between him and a co-worker, despite him never granting permission.
Social media erupts over AI access
People agreed the incident showed that AI assistants given access to calendars, emails, messages, shopping accounts and other resources are like power tools that can do real damage if not used carefully.
Meta defends Muse's access
Meta CTO David Singleton said Muse could only read Messages if a user manually granted two privileges: full-disk access and enabling a Messages connector setting in Muse.
“The Messages integration in the Muse Mac app is opt in. Your Muse can only read Messages content if macOS system-level Full Disk Access is granted and the Messages connector is enabled.”
Security expert questions Meta's claim
macOS security expert Patrick Wardle said that with full-disk access, any non-root file is readable, including browsing history, browser cookies and chats, contradicting Meta's assertion.
“From a technical point of view, with FDA (full-disk access), any (non-root file), is readable, browsing history, browser cookies, chats, etc etc etc.”
Apple announces privacy setting changes
Apple said some developers are using full-disk access in ways that could put users at risk, exposing files, mail, messages and browsing history without users' full knowledge and understanding.
“Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems, including files, mail, messages, and even browsing history, without users' full knowledge and understanding.”
Apple warns of growing AI risks
Apple said as AI agents become increasingly capable and autonomous, the risks associated with full-disk access will grow substantially, and users must clearly understand these risks before granting such access.
“As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.”
Muse faces mounting pressure
Patrick Wardle disclosed a Muse configuration allowing any app to take full control of the assistant, and Amazon blocked Muse from its platform, saying such apps should operate openly and respect service provider decisions.
What matters most
Apple is changing macOS privacy settings to prevent AI agents and other apps from misusing full-disk access to read messages, emails and browsing history.
