Apple Strengthens macOS Full Disk Access Controls in Response to AI Security Risks

In response to concerns about privacy, Apple has announced new measures to enhance controls over the “Full Disk Access” setting on macOS. This decision follows a controversial claim by a journalist who alleged that the Meta application, Muse, accessed their private messages without consent, a claim that Meta has since contested.

The announcement comes shortly after Inc. columnist Jason Aten reported that Muse appeared to know details of his private messages, raising significant questions about the security and trustworthiness of AI applications on personal computers. In light of these events, Apple emphasized its commitment to user safety and control over their personal data.

Additionally, Wired recently highlighted that a flaw in the ChatGPT Mac app could allow unauthorized access to sensitive user data. Both incidents have sparked a reevaluation of security practices surrounding desktop AI agents that request higher access privileges to user files and communications.

The “Full Disk Access” feature was originally intended to facilitate proper functioning of backups. However, with the increasing capabilities of AI agents, Apple has recognized that the risks associated with providing such extensive access to apps need to be addressed. The company intends to improve how users are informed about these permissions.

For applications like Muse, Full Disk Access is optional, allowing developers to request permission to access a wide array of user files, including emails, messages, and browsing history. Apple has indicated that some third-party developers have utilized these permissions in ways that may inadvertently expose sensitive user information.

The company plans to establish new controls that will help ensure that users who want to grant apps significant access will have to affirmatively take action to do so. According to Apple, as AI systems become more autonomous, the associated risks increase, making it essential for users to thoroughly understand the implications of granting such permissions.

Despite inquiries, Apple did not provide additional comments regarding this shift in policy. It is important to note that the changes reflect a focus on informed user consent rather than merely limiting access permissions.

Correction: The initial description of the policy change as “limiting” permissions has been amended to clarify that it relates to informed consent, rather than introducing new restrictions.