苹果将为 macOS Full Disk Access 增加授权控制，应对 AI 智能体访问风险
Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents
评分 60
导读
苹果宣布将为 macOS 的 Full Disk Access 引入额外控制，使希望授予应用该访问权的用户需执行非常明确的动作。此前有记者称 Meta 的 Muse 应用读取了其私信，Meta 对此有异议，另有报道称 ChatGPT Mac 应用存在可让黑客访问敏感数据的漏洞；苹果称 AI 智能体提升了此类访问的风险，并强调该调整旨在加强知情同意而非新增权限限制。
推荐理由
苹果将调整 macOS Full Disk Access 授权方式，背景是桌面 AI 智能体读取文件与消息引发隐私担忧，可供读者观察权限边界与知情同意机制的变化。
主体与标签
正文
Days after a journalist claimed that Meta’s Muse app on Mac read their private messages — a claim that Meta disputed — Apple announced that it’s introducing additional controls around a setting called “Full Disk Access” on macOS. The feature was designed to allow backups to function properly, but AI agents have now increased “the risks associated with this level of access,” Apple said.
Apple’s statement comes shortly after Inc. columnist Jason Aten reported that Muse knew the content of his private messages — even though he claimed to have not given the AI agent permission. The report raised questions about the level of security and trust users have in desktop-based AI, which can control things on their systems and read their files and messages.
The decision also comes after a Wired report cited that a flaw in ChatGPT’s Mac app could have allowed hackers to access sensitive data.
AI agents that run on the desktop allow users to provide their respective apps with greater access to the files, messages, and other personal content on their computers by adjusting macOS settings.
In Muse’s case, the AI optionally allows users to enable Full Disk Access. This setting, Apple explains, gives an app permission to access files, mail, messages, and even browsing history.
“Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users’ full knowledge and understanding,” Apple said in a new blog post aimed at developers.
The company says that, going forward, it will introduce new controls aimed at ensuring that users who “genuinely wish to grant an app this extraordinary level of access” can do so only with “very explicit user action.”
“Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy,” Apple wrote.
Apple did not respond to TechCrunch’s inquiry about the feature change.
Correction: Due to an editorial error, the change was described as Apple “limiting” permissions. After publication, the author of this article updated the wording to reflect their original intent: the change reflects informed consent, but is not a new limit.
When you purchase through links in our articles, we may earn a small commission . This doesn’t affect our editorial independence.
Sarah has worked as a reporter for TechCrunch since August 2011. She joined the company after having previously spent over three years at ReadWriteWeb. Prior to her work as a reporter, Sarah worked in I.T. across a number of industries, including banking, retail and software.
You can contact or verify outreach from Sarah by emailing [email protected] or via encrypted message at sarahperez.01 on Signal.