Apple Updates macOS Permissions to Curb AI Agent Abuse
Apple has announced changes to macOS Full Disk Access privacy settings in response to growing concerns over how third-party developers and AI agents utilize system-level privileges.
Radwan AbdulhadiEditor and technology writer
Apple Addresses Full Disk Access Risks
Apple announced changes to its macOS privacy settings to stop third-party app developers from misusing permissions to access sensitive message histories. The development was detailed in an official company announcement. Further details are available from Ars Technica in the original source material.
The privacy adjustment comes shortly after tech columnist Jason Aten reported that Meta's new general-purpose AI agent, Muse, sent an unsolicited notification referencing a private conversation between him and a co-worker over Apple Messages. Aten noted that he never granted permission for Muse to read his messages.
The Debate Over Meta's Muse AI Agent
The incident sparked significant discussion on social media, with many users comparing AI assistants that gain access to emails, calendars, messages, and shopping accounts to powerful tools that can cause real damage if mishandled.
Meta CTO David Singleton addressed the concerns in a public rebuttal, explaining how the integration works on macOS.
"The Messages integration in the Muse Mac app is opt in," Singleton stated, adding that the AI can only read messages if macOS system-level Full Disk Access is granted and the Messages connector is enabled.
Security Experts Question System Privileges
macOS security expert Patrick Wardle questioned Singleton's denial, noting that full-disk access allows any non-root file to be read, including browsing history, cookies, and chat logs. Security analysis of Muse has highlighted serious concerns regarding the extraordinarily privileged nature of the AI assistant.
When questioned about how Muse could avoid reading messages while holding full-disk access—a privilege that exposes all system files—Meta PR reiterated Singleton's previous statements regarding opt-in settings.
Apple Sets the Record Straight on Privacy
Without naming specific developers or applications, Apple explained the rationale behind modifying the Full Disk Access permission setting. The tech giant pointed out that some developers utilize the permission in ways that expose everything on a user's system without full understanding.
Apple emphasized that as AI agents become more capable and autonomous, the risks tied to such profound levels of access will expand substantially. The company aims to ensure users clearly comprehend these risks before authorizing permissions.
Broader Industry Fallout and Precautions
The privacy updates follow a series of security disclosures involving Muse, including vulnerabilities that could let any code running on a Mac command the AI assistant. Additionally, platforms like Amazon have blocked Muse for failing to respect service provider decisions.
Security analysts recommend that users carefully configure permissions when utilizing advanced AI assistants, though recent events indicate that precautionary measures alone may not be entirely sufficient against unexpected behaviors.
Sources
- Ars TechnicaApple changes full-disk access permissions to curb abuse from AI agents
Continue chronologically
Related entity coverage
Related stories
Meta Launches Muse AI Assistant App for Mac
Meta has expanded its Muse AI assistant to macOS, allowing users to integrate the agent with local files, mail, and apps to perform tasks on their behalf.
Meta’s Muse AI Assistant Hit by Serious Zero-Day Vulnerability
Security expert Patrick Wardle has uncovered a critical zero-day in Meta’s Muse AI, allowing attackers to hijack accounts and bypass macOS security.
Meta Patches Zero-Day Vulnerability in Muse AI Desktop App
Meta has released a security patch for its Muse macOS application after a zero-day exploit allowed attackers to hijack the AI agent’s system privileges.
Apple Patches CoreGraphics Zero-Day Exploited in Attacks
Apple has released security updates to fix a zero-day vulnerability in CoreGraphics that was exploited in targeted attacks against iOS devices.
