[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-apple-curbs-full-disk-access-after-ai-agent-reads-messages":10,"sections":38},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":37,"feedback_at":22,"cost_usd":37,"total_tokens":37},9835,"apple-curbs-full-disk-access-after-ai-agent-reads-messages","Apple Curbs Full Disk Access After AI Agent Reads Messages","After Meta's Muse AI agent referenced a private Messages thread, Apple is tightening full disk access permissions apps use to reach message history.","Apple is rewriting the rules for full disk access on macOS, after an AI agent read someone's private Messages thread without an explicit go-ahead.\n\nThe change arrived Friday, two weeks after tech columnist Jason Aten reported that Meta's general-purpose AI agent, Muse, sent him a notification referencing a conversation he'd had with a co-worker over Apple Messages. Aten said he never granted Muse permission to read his messages and assumed the app had no way in. Meta CTO David Singleton pushed back, noting that reaching Apple Messages requires a user to grant two separate privileges: full disk access, a macOS system-level permission, plus a Messages connector toggle inside Muse itself. Apple didn't dispute that two-step process, but it decided the system-level half of it was too easy to misuse.\n\nFull disk access was built for utilities like backup tools and malware scanners, not for agents that read your inbox and shopping history to act on your behalf. The backlash shows how fast useful automation turns into \"who gave you permission to read that\" once an AI agent actually exercises the access it's been granted. Apple tightening the permission model here narrows what any third-party app, AI-powered or not, can quietly reach.\n\nSingleton's defense was technically accurate, which is exactly the problem: users keep approving permissions they don't understand until an agent actually uses them.","[\"apple\",\"ai agents\",\"privacy\",\"macos\"]","2026-10-02T23:03:16.000Z","2026-10-05T08:49:53.499Z","2026-10-05T08:49:57.632Z","published",null,[],"security",[26,27,28,29],"apple","ai agents","privacy","macos",[31,34],{"name":32,"url":33},"Ars Technica","https:\u002F\u002Farstechnica.com\u002Fsecurity\u002F2026\u002F10\u002Fapple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents\u002F",{"name":35,"url":36},"MacRumors","https:\u002F\u002Fwww.macrumors.com\u002F2026\u002F10\u002F02\u002Fapple-announces-macos-full-disk-access-changes\u002F",0,{"sections":39},[40,45,48,53,58,63,67,72,77,82,87,92,97,102],{"name":41,"slug":42,"count":43,"latest_published_at":44},"AI","ai",6152,"2026-10-05T04:00:00.000Z",{"name":46,"slug":24,"count":47,"latest_published_at":44},"Security",859,{"name":49,"slug":50,"count":51,"latest_published_at":52},"Policy","policy",444,"2026-10-03T15:02:01.000Z",{"name":54,"slug":55,"count":56,"latest_published_at":57},"Deals","deals",323,"2026-10-04T13:00:00.000Z",{"name":59,"slug":60,"count":61,"latest_published_at":62},"Hardware","hardware",204,"2026-10-03T14:50:50.000Z",{"name":64,"slug":65,"count":66,"latest_published_at":44},"Science","science",177,{"name":68,"slug":69,"count":70,"latest_published_at":71},"Consumer Tech","consumer-tech",158,"2026-10-03T03:21:12.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Software","software",97,"2026-10-04T10:00:00.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Dev Tools","dev-tools",96,"2026-10-01T16:57:03.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",92,"2026-10-04T14:36:25.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",53,"2026-10-02T02:50:39.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",51,"2026-10-05T02:35:01.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Reviews","reviews",32,"2026-10-02T18:00:00.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"How-To","how-to",7,"2026-10-01T09:00:00.000Z"]