Apple称将收紧macOS“完全磁盘访问”控制，以应对AI Agent带来的新风险

在一名记者声称 Meta 的 Mac 应用 Muse 读取了其私人消息数日后——Meta 对此说法提出异议——Apple 宣布，将围绕 macOS 中名为“完全磁盘访问”（Full Disk Access）的设置引入额外控制措施。Apple 表示，这项功能原本旨在让备份能够正常运行，但 AI Agent 已经增加了“与这一访问级别相关的风险”。

Apple 的声明发布不久前，Inc. 专栏作家 Jason Aten 报道称，Muse 知道其私人消息的内容——尽管他声称自己并未授予该 AI Agent 相关权限。这篇报道引发了人们对桌面端 AI 安全性和可信度的疑问，因为这类 AI 可以控制用户系统中的部分功能，并读取文件和消息。

限制这项 Mac 功能的决定，也发生在一篇 Wired 报道之后。该报道指出，ChatGPT 的 Mac 应用中存在的一个漏洞，可能会让黑客获取敏感数据。

运行在桌面上的 AI Agent 可以让用户通过调整 macOS 设置，向相应应用授予对其计算机中文件、消息及其他个人内容更广泛的访问权限。

以 Muse 为例，该 AI 可选择让用户启用“完全磁盘访问”。Apple 解释称，这项设置会允许应用访问文件、邮件、信息，甚至浏览历史记录。

Apple 在一篇面向开发者发布的新博客文章中表示：“一些开发者正在以可能使用户面临风险的方式使用‘完全磁盘访问’，在用户未充分知情和理解的情况下，暴露其系统中的一切内容……”

该公司表示，未来将引入新的控制措施，以确保那些“确实希望授予应用这种非同寻常访问级别”的用户，只有通过“非常明确的用户操作”才能完成授权。

Apple 写道：“解决这一问题至关重要。随着 AI Agent 的能力和自主性不断增强，与这一访问级别相关的风险将大幅增加。我们致力于确保用户在授予此类访问权限之前，清楚了解这些风险，从而能够就自己的数据和隐私作出明智决定。”

Apple 未回应 TechCrunch 就这一功能变更提出的询问。

Days after a journalist claimed that Meta’s Muse app on Mac read their private messages — a claim that Meta disputed — Apple announced that it’s introducing additional controls around a setting called “Full Disk Access” on macOS. The feature was designed to allow backups to function properly, but AI agents have now increased “the risks associated with this level of access,” Apple said.

Apple’s statement comes shortly after Inc. columnist Jason Aten reported that Muse knew the content of his private messages — even though he claimed to have not given the AI agent permission. The report raised questions about the level of security and trust users have in desktop-based AI, which can control things on their systems and read their files and messages.

The decision to limit the Mac feature also comes after a Wired report cited that a flaw in ChatGPT’s Mac app could have allowed hackers to access sensitive data.

AI agents that run on the desktop allow users to provide their respective apps with greater access to the files, messages, and other personal content on their computers by adjusting macOS settings.

In Muse’s case, the AI optionally allows users to enable Full Disk Access. This setting, Apple explains, gives an app permission to access files, mail, messages, and even browsing history.

“Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems…without users’ full knowledge and understanding,” Apple said in a new blog post aimed at developers.

The company says that, going forward, it will introduce new controls aimed at ensuring that users who “genuinely wish to grant an app this extraordinary level of access” can do so only with “very explicit user action.”

“Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy,” Apple wrote.

Apple did not respond to TechCrunch’s inquiry about the feature change.