Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
- ID
- 31872
- Status
- summarized
- Published
- 05 Oct 2026, 6:38 PM
- Fetched
- 05 Oct 2026, 9:21 PM
- Provider
- The Hacker News
- Category
- security
- Original URL
- https://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.html
- Source URL
- https://feeds.feedburner.com/TheHackersNews
Summary
- Score
- 7.5
- Created
- 05 Oct 2026, 9:22 PM
- Tags
- Audience
- developersvibe_codersai_agent_userssaas_startup_founders
What happened
Apple says it will tighten macOS Full Disk Access (FDA) controls because AI agents are being granted the setting in ways that expose files, mail, messages, and browsing history without users fully understanding the risk, and it wants FDA granted only via an explicit user action. Apple gave no rollout date. The post follows reporting that Meta's "Muse" personal AI agent read a journalist's private iMessages after FDA was granted; Meta clarified Muse needs two permissions — FDA plus Messages access — and Muse is described as running on a dedicated Linux VM on Meta's cloud.
Why it matters
If you ship or recommend a macOS desktop agent that asks for Full Disk Access, plan for a near-certain consent-flow change with no published date: build a degraded mode that works with narrower APIs instead of a blanket FDA prompt. The Meta Muse detail is the concrete design lesson — access required both FDA and a separate Messages permission, so per-resource scoping is feasible and is the safer default to implement now.
Discussion angle
What does your agent actually need — full disk, or a handful of scoped APIs? Walk through how you'd redesign a macOS agent's permission prompt today, given Apple's stated direction and the fact that Muse needed both FDA and Messages access.