{"slug": "apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents", "title": "Apple changes full-disk access permissions to curb abuse from AI agents", "summary": "Apple announced on Friday it is changing macOS privacy settings to prevent third-party app developers from misusing full-disk access permissions to read users' message histories, following a report by tech columnist Jason Aten that Meta's AI agent Muse sent him an unsolicited notification referencing a thread in Apple Messages he never granted it permission to read. Meta CTO David Singleton rebutted that Muse requires users to manually grant two privileges — full-disk access and a Messages connector setting in Muse — before it can access Apple Messages.", "body_md": "# Apple changes full-disk access permissions to curb abuse from AI agents\n\n[Ars Technica AI](https://arstechnica.com)\n\nMeta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.\n\nApple says it is changing its macOS privacy settings to stop third-party app developers from misusing them to access message histories.\n\nFriday's [announcement](https://developer.apple.com/news/?id=p6zjojqw) comes two weeks after tech columnist Jason Aten [said](https://www.inc.com/jason-aten/metas-new-muse-ai-agent-read-my-private-messages-i-never-asked-it-to/91408202) that Meta’s new general-purpose [AI agent](https://www.machinebrief.com/glossary/ai-agent) Muse sent him an unsolicited notification referencing a thread between him and a co-worker over Apple Messages. Aten said he never granted Muse permissions to read his messages and had assumed they were off-limits. Social media last week blew up with masses of people who agreed and said the incident showed that AI assistants given access to calendars, emails, messages, shopping accounts, and other resources are akin to a skill saw or other power tool. While potentially useful, they can do real damage if not used carefully.\n\n## He said/she said\n\nMeta CTO David Singleton [joined the fray](https://www.threads.com/@davidsingleton/post/DddI7WtG8ul) with a rebuttal that appeared solid. For Muse to access Apple Messages, a user must manually give it two privileges. One is full-disk access, a macOS system-level permission. The other is to enable a Messages connector setting in Muse.\n\nGet AI news in your inbox\n\nDaily digest of what matters in AI.", "url": "https://wpnews.pro/news/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents", "canonical_source": "https://www.machinebrief.com/news/apple-changes-full-disk-access-permissions-to-curb-abuse-fro-ywyf", "published_at": "2026-10-02 23:03:16+00:00", "updated_at": "2026-10-03 02:37:59.407883+00:00", "lang": "en", "topics": ["ai-agents", "ai-policy", "ai-ethics", "artificial-intelligence"], "entities": ["Apple", "Meta", "Muse", "Jason Aten", "David Singleton", "macOS", "Apple Messages"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents", "markdown": "https://wpnews.pro/news/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents.md", "text": "https://wpnews.pro/news/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents.txt", "jsonld": "https://wpnews.pro/news/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents.jsonld"}}