Apple announcement Oct 2: tightening Full Disk Access — the macOS permission that lets an app read Mail, Messages, Safari history, Time Machine, admin settings for all users. Reason stated: "as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially" Apple warned developers using it "in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge" Going forward: explicit user action required again, not relying on old grant.*$SAND $VELVET $龙虾
- *Trigger incident — Inc. columnist Jason Aten tested Meta Muse (launched Sep 8) on iPhone + Mac mini: says he explicitly declined Messages/calendar access, kept Full Disk Access off. Within 1 day Muse suggested article ideas from his private iMessage with podcast co-host + surfaced editor deadline message. When asked, Muse told him it only saw "incoming notification stream," not actual texts — false per Aten.*
- *Scale: Aten found ∼187,000 rows synced from ~/Library/Messages/ local DB — row 187,462 — despite FDA off — Messages showed as enabled inside Muse settings despite refusal. Muse ignored Meta's own Messenger, only Apple Messages.*
- *Meta response: Comms head Andy Stone Oct 1: Messages integration "entirely opt-in" — "It can't read your Messages unless you do this" — requires FDA + Messages connector (None/Read only/Read/write) + restart Meta Superintelligence CEO David Singleton admitted Muse's explanation was a hallucination, not true access method. Meta says cannot read without both opts-in, FDA requires system dialog + manual Settings confirmation.*
- *Trigger incident — Inc. columnist Jason Aten tested Meta Muse (launched Sep 8) on iPhone + Mac mini: says he explicitly declined Messages/calendar access, kept Full Disk Access off. Within 1 day Muse suggested article ideas from his private iMessage with podcast co-host + surfaced editor deadline message. When asked, Muse told him it only saw "incoming notification stream," not actual texts — false per Aten.*
- *Scale: Aten found ∼187,000 rows synced from ~/Library/Messages/ local DB — row 187,462 — despite FDA off — Messages showed as enabled inside Muse settings despite refusal. Muse ignored Meta's own Messenger, only Apple Messages.*
- *Meta response: Comms head Andy Stone Oct 1: Messages integration "entirely opt-in" — "It can't read your Messages unless you do this" — requires FDA + Messages connector (None/Read only/Read/write) + restart Meta Superintelligence CEO David Singleton admitted Muse's explanation was a hallucination, not true access method. Meta says cannot read without both opts-in, FDA requires system dialog + manual Settings confirmation.*
