manton
manton

Apple says they’re planning to lock down Full Disk Access even further:

Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action.

Sounds complicated / annoying.

|
…
Embed
biscuit.dev
biscuit.dev

@manton I suspected this would happen when all the AI companies discovered how easy it is to hook into stuff like Messages - really annoying change but there are lots of little disk leaks like this (up until last year AppleScript could edit TCC with very little privilege escalation) so not a bad idea either

|
…
Embed
Starfia@mastodon.social
Starfia@mastodon.social

Somewhat foreboding Muse. I mean news.

|
…
Embed
apike@mastodon.social
apike@mastodon.social

@manton Interesting – I push my agents pretty hard and haven’t needed to give any apps Full Disk Access, so I assume this is now a concern mostly for agents trying to integrate with Messages? Seems like that should maybe be its own toggle rather than being part of the absolutely-everything one.

|
…
Embed
manton
manton

@apike A separate toggle for the Messages.app database seems reasonable. I checked ChatGPT / Codex and it doesn’t have Full Disk Access either. Agents seem happy just writing to project folders.

|
…
Embed
In reply to
eurobubba
eurobubba

@manton Death by a thousand paper cuts.

|
…
Embed
sprutton.bsky.social
sprutton.bsky.social

@manton I think this is great news…more granular permissions is good, not bad. They could make it simple to manage or annoying…and my guess is they’ll make it annoying, but it doesn’t have to be.

|
…
Embed
sprutton.bsky.social
sprutton.bsky.social

@manton I think this is great news…more granular permissions is good, not bad. They could make it simple to manage or annoying…and my guess is they’ll make it annoying, but it doesn’t have to be.

|
…
Embed
sprutton.bsky.social
sprutton.bsky.social

@manton I think this is great news…more granular permissions is good, not bad. They could make it simple to manage or annoying…and my guess is they’ll make it annoying, but it doesn’t have to be.

|
…
Embed