Apple is tightening macOS’s Full Disk Access controls after several incidents highlighted how desktop AI agents can gain deep, sometimes unexpected, access to user data. Reports surfaced that a Mac AI app appeared to read a journalist’s private messages and that a separate Mac client had a vulnerability that could expose sensitive files. Full Disk Access - originally intended to let backups and certain utilities access system files - also permits apps to read files, mail, messages and browsing history. Apple warns some developers are using that level of access in ways that could expose everything on a user’s machine without their full understanding.
To address those risks, Apple will add stricter controls so that granting Full Disk Access requires very explicit user actions and clearer explanations of the consequences. The company frames the change as necessary because AI agents are becoming more autonomous and capable, increasing the potential harm if they have unrestricted access to personal data. The move targets developers and the workflow for requesting privileges, aiming to ensure users who truly want to grant extraordinary access can do so knowingly, while reducing the chance of inadvertent or opaque data exposure.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Vanguard's password reset form enforces a maxlength of 20 characters, truncating longer passwords when pasted, while the login page does not have this restriction. This mismatch causes password verification failures and user confusion. (tanin.nanakorn.com)
Apple will tighten controls on Full Disk Access in macOS to prevent AI apps from accessing sensitive user data without explicit permission. This move aims to protect user privacy as AI agents become more autonomous and capable. (daringfireball.net)
The Electronic Frontier Foundation promotes Opt Out October to encourage individuals to take control of their data and devices by opting out of big tech surveillance and services. The campaign offers practical steps to reduce data collection and regain privacy from large technology companies. (eff.org)
Big Balls is managing the operations for the United States' new government network infrastructure. Concerns have been raised about potential criminal charges and security vulnerabilities associated with this management. (medium.com)
A federal judge in Oklahoma ruled that police using Flock's automated license plate reader system without a warrant violated the Fourth Amendment. The decision highlights concerns about the system's potential for indiscriminate mass surveillance, with over 100,000 warrantless searches conducted monthly. (404media.co)
ICE stored photos, license plates, and other data of protesters in a Palantir-built database called the Investigative Case Management system. Court filings reveal DHS agents used this database to track and intimidate observers during enforcement operations in Maine. (wired.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.