Apple is updating macOS privacy settings to prevent third-party apps from misusing full-disk access to read message histories. The change follows a controversy involving Meta’s AI agent Muse, which sent tech columnist Jason Aten an unsolicited notification referencing a private Apple Messages thread he claimed he never authorized. Aten argued that AI assistants with access to calendars, emails, messages, and shopping accounts pose risks similar to power tools—useful but dangerous if misused.
Meta’s CTO David Singleton countered that Muse requires two manual steps to access Messages: granting macOS Full Disk Access and enabling the Messages connector within the app. He emphasized the integration is opt-in and that users bear responsibility if both settings are enabled. Security expert Patrick Wardle challenged this, noting that with Full Disk Access, any non-root file—including messages—is technically readable regardless of app-specific controls.
Meta reiterated Singleton’s statement as its only response, maintaining that Muse cannot access messages without explicit user approval of both permissions.
Source: Ars Technica · Summarized by HeadlinesBriefing