Apple updates macOS privacy settings to prevent misuse of full-disk access by AI agents

Published:

Apple has announced changes to its macOS privacy settings aimed at preventing third-party applications from misusing full-disk access to read sensitive user data, including message histories. This update follows a recent incident involving Meta’s AI agent, Muse, which reportedly accessed private messages without explicit user consent, raising significant privacy concerns among users.

The announcement, made on Friday, comes in the wake of tech columnist Jason Aten’s experience where Muse sent him a notification referencing a private conversation he had via Apple Messages. Aten claimed he had not granted Muse permission to access his messages, leading to widespread discussions on social media about the potential risks associated with AI assistants that have access to personal data.

Privacy Concerns and User Control

In response to the backlash, Meta’s CTO David Singleton clarified that for Muse to access Apple Messages, users must manually enable two specific permissions: full-disk access and a Messages connector setting within the Muse application. Singleton emphasized that the integration is opt-in, suggesting that users have control over what data is accessible to the AI.

However, this explanation has not quelled concerns among privacy advocates and experts. Patrick Wardle, a macOS security specialist, expressed skepticism regarding Singleton’s assertion, noting that full-disk access allows applications to read a wide range of user data, including browsing history and chat logs. This raises questions about the adequacy of user consent mechanisms in place for applications with such extensive permissions.

Implications for AI Development

The incident has sparked a broader conversation about the responsibilities of tech companies in safeguarding user privacy, particularly as AI technologies become more integrated into daily life. Critics argue that while AI can offer significant benefits, it also poses risks if not managed properly. The changes to macOS privacy settings reflect an effort by Apple to enhance user control and mitigate potential misuse of sensitive information by third-party applications.

As the landscape of AI continues to evolve, the balance between functionality and privacy remains a critical issue for developers and users alike. Apple’s proactive measures may serve as a model for other companies navigating similar challenges in the realm of user data protection.

For further details on Apple’s announcement, refer to Apple’s developer news page.

For ongoing coverage of global cybersecurity developments, visit our Global cybersecurity section.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Federal contractors may soon face new cybersecurity rules for handling controlled unclassified information

Federal contractors handling sensitive information may soon face significant changes in cybersecurity regulations concerning controlled unclassified information (CUI). Proposed federal regulations, which could be...

HPE security advisory AV26-1011 warns of vulnerabilities in AOS-S and CPPM products

Hewlett Packard Enterprise (HPE) has issued a security advisory (AV26-1011) regarding vulnerabilities affecting its AOS-Switch and ClearPass Policy Manager (CPPM) products. As of October...

Alleged Ploutus malware creator Anibal Canelon Aguirre appears in Nebraska court

The alleged mastermind behind the Ploutus malware, Anibal Alexander Canelon Aguirre, made his first court appearance in Nebraska after being apprehended by federal authorities....

AI-enabled threat actor JadePuffer automates destructive actions in cloud environments using Azure service principals

Recent research from Check Point has revealed that the AI-enabled threat actor known as JadePuffer, tracked as Storm-3168, is leveraging compromised Azure service principals...