Brief
Apple revises macOS full‑disk access to block AI agents from reading messages
The change forces developers to obtain both full‑disk access and a Messages connector before an AI can read user chats.
By Felo News Desk · Published
Apple announced on Friday that macOS will now require two separate permissions for any third‑party AI agent to read Messages content: system‑level Full Disk Access and an opt‑in Messages connector setting, according to Ars Technica.
The move follows tech columnist Jason Aten’s claim that Meta’s Muse AI displayed a notification referencing a private Messages thread without his consent. Aten said he never granted Muse the necessary permissions.
Meta CTO David Singleton responded that Muse’s Messages integration is "opt‑in" and can only read messages if both permissions are granted. He reiterated the same statement when pressed for technical details.
Security researcher Patrick Wardle warned that Full Disk Access effectively opens all user files, underscoring the potential risk of misuse.
Key facts
- Apple requires both Full Disk Access and an enabled Messages connector for AI apps to read Messages. (arstechnica.com)
- Jason Aten reported that Meta’s Muse AI accessed his Messages without his permission. (arstechnica.com)
- Meta CTO David Singleton said the Muse integration is opt‑in and needs the two permissions. (arstechnica.com)
- Security expert Patrick Wardle noted that Full Disk Access makes all non‑root files readable. (arstechnica.com)
Sources
- [1] arstechnica.com — originally reported as “Apple changes full-disk access permissions to curb abuse from AI agents”
