Apple tightens data access on macOS because of AI
On mobile devices such as iPhone and iPad, Apple applies a strict application packaging mechanism, preventing applications from arbitrarily accessing each other's data. However, the macOS operating system is more flexible when equipped with the "Full Disk Access" feature. This permission was originally designed for cloud backup services, allowing applications to read users' files, emails, personal messages and browsing history after being granted permission.
In a new notice sent to developers, Apple warns that some parties are abusing the Full Disk Access feature in a way that directly threatens user information security. Apple said that as AI agents become increasingly powerful and autonomous, the risks that come with this level of access will increase significantly. Therefore, the company will add a new layer of control to ensure users only grant this special level of access when there is really an extremely clear confirmation action.
Apple's move to tighten security comes after trouble related to Muse, an AI application developed by Meta and launched on September 8. Jason Aten, a writer for Inc. magazine, criticized Muse for arbitrarily reading private messages on his Mac even though he affirmed that he had never granted Full Disk Access permission to the application.
Andy Stone, Meta representative, denied the accusations, asserting that Muse can only read message content when users actively enable Full Disk Access permission and the Messages application connection feature, and users can revoke this permission at any time.
In addition to the Meta incident, cybersecurity experts also warned about vulnerabilities in the ChatGPT application for Mac, which could be exploited by criminals to access sensitive data on computers.
With the wave of AI tools on computers requiring more and more permissions to handle complex tasks such as file management or canceling subscription services, Apple said it will help users understand all risks before making the decision to share personal data.