Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
Apple said it will add stricter controls around macOS’s Full Disk Access permission after incidents highlighted risks from desktop AI agents. The company warned that more capable and autonomous AI agents increase the danger posed by apps that can read files, mail, messages, and browsing history.
Why It Matters
The change targets a macOS setting that can grant apps broad access to user data; tightening it affects how desktop AI assistants operate and aims to reduce the chance that apps access sensitive content without users' full understanding. This responds to recent reports alleging AI apps read private messages and to a separate security report about a ChatGPT Mac app vulnerability.
Key Facts
- Feature affected: macOS Full Disk Access
- Reason cited: Increasing risks from more capable and autonomous AI agents
- Triggering incidents: Report by Inc. columnist Jason Aten alleging Meta's Muse read his private messages; Wired report on a potential flaw in ChatGPT's Mac app
- Apple action: Introduce new controls requiring very explicit user action to grant Full Disk Access
- Apple source: Developer-focused blog post
Apple announced plans to tighten controls around the Full Disk Access permission on macOS, saying that increasingly capable AI agents have elevated the risks associated with broad system access. Full Disk Access is a macOS setting originally intended to allow backup and system tools to operate correctly, but Apple said some developers are using it in ways that could expose users’ files, mail, messages, and browsing history without their full comprehension. The company’s statement followed a recent report from Inc. columnist Jason Aten that Meta’s Muse app on Mac appeared to know the content of his private messages, a claim Meta disputed. A separate Wired article also flagged a flaw in the ChatGPT Mac app that could have permitted attackers to reach sensitive data. Apple pointed to those and similar developments as part of the rationale for imposing stricter controls. According to Apple, the new controls will ensure that users who truly wish to grant an app Full Disk Access can do so only after taking very explicit action. The company framed the change as necessary because the autonomy and capability of AI agents means the potential harm from granting broad access will grow over time, and it emphasized that users need clear understanding of those risks before consenting. Apple announced the change in a blog post aimed at developers. The company did not provide additional technical details in the post, and it did not respond to TechCrunch’s inquiry about the implementation timeline or specifics of the forthcoming controls.
Keep Reading
Apple will limit Mac disk access as AI agents ‘substantially’ increase risk
Netflix is pivoting away from prestige
Call it AI, call it Super Intelligence, only 2% of consumers are buying it
