FamCheck. Everyone who looks after your kids stays in the loop. $9.99 a month for the whole household, first week free, no card. famcheck.coSPONSORED
The Miami Art Journal

Tech

Apple Tightens macOS Access Controls for AI Agents

The Editors ·

Apple Tightens macOS Access Controls for AI Agents

Apple introduces additional restrictions on the Full Disk Access feature in response to emerging security concerns surrounding desktop-based artificial intelligence applications.

Apple has announced new controls for the macOS “Full Disk Access” setting, citing increased risks associated with the growing capabilities of AI agents. The company stated in a blog post that some developers are utilizing this permission level in ways that may expose users to security threats without their full knowledge or understanding. The feature, originally designed to facilitate proper backup functions, grants applications the ability to access files, mail, messages, and browsing history.

The decision follows recent reports regarding the security practices of third-party AI applications. Inc. columnist Jason Aten reported that Meta’s Muse app on Mac accessed the content of his private messages. Aten stated that he had not explicitly granted the AI agent permission to view this data. Meta disputed the claim that the app had read these private messages. The incident raised broader questions among users and observers regarding the level of security and trust required for desktop-based AI systems that can control elements on a user’s computer and read personal files.

Apple explained that AI agents running on the desktop allow users to provide respective apps with greater access to personal content by adjusting macOS settings. In the case of Muse, the AI allows users to optionally enable Full Disk Access. Apple noted that this setting provides an extraordinary level of access to system data. The company emphasized that as AI agents become more capable and autonomous, the risks associated with this level of access will grow substantially.

To address these concerns, Apple plans to introduce new controls aimed at ensuring that users who genuinely wish to grant an app this level of access can do so only with very explicit user action. The company stated in its blog post that it is committed to ensuring users clearly understand the risks before granting such access. This commitment is intended to help users make informed decisions about their own data and privacy.

The announcement comes shortly after a separate report by Wired, which cited a flaw in ChatGPT’s Mac app that could have allowed hackers to access sensitive data. Apple did not respond to inquiries from the report regarding the specific timeline for the implementation of these new controls. The company’s statement was aimed at developers, highlighting the need for careful handling of user data as the technology evolves. The focus remains on the technical adjustments required to mitigate potential security vulnerabilities inherent in granting broad system permissions to autonomous agents.

Takeaway: Apple is introducing new controls to ensure users take very explicit action before granting Full Disk Access to AI agents.

Source: TechCrunch AI