data protection

Privacy, Full Disk Access and AI Agents

, , ,

Apple is intensifying its review and enforcement of Full Disk Access (FDA) permissions in macOS to enhance user privacy, especially with the advent of AI agents like Meta’s Muse that require broad access to user data to operate autonomously. These AI agents demand sweeping FDA rights to interact with sensitive data such as Messages and Mail, raising concerns about potential inaccuracies, unexpected actions, and vulnerabilities like prompt injection, with users ultimately held responsible for agent behavior. Apple aims to refine FDA controls carefully to better protect privacy without adding complexity, though it remains uncertain whether this will effectively mitigate risks posed by autonomous AI on Macs.

https://eclecticlight.co/2026/10/06/privacy-full-disk-access-and-ai-agents/

Paperweight

, , ,

Paperweight is a local-first, open-source application that scans your email inbox to map and manage your digital footprint by helping you identify accounts, get breach alerts, bulk unsubscribe from mailing lists, and generate GDPR data deletion requests. It supports any IMAP email provider and keeps all data processing on your device to ensure privacy, offering a free trial with optional paid upgrades for extended features.

https://www.paperweight.email/

Why You Can’t Trust Privacy & Security

, ,

An investigation using a custom macOS app, Insent, reveals that Apple’s Privacy & Security settings can misleadingly suggest an app lacks access to protected folders like Documents when it actually does. The macOS TCC system grants folder access based on user intent (e.g., selecting a folder via Open Panel), which circumvents typical consent prompts and disables effective revocation via Settings, requiring terminal commands and a restart to reset permissions. This exposes a discrepancy where Security settings do not accurately reflect an app’s actual access, raising concerns about the reliability of these macOS privacy controls.

https://eclecticlight.co/2026/04/10/why-you-cant-trust-privacy-security/

Scroll to Top