221
you are viewing a single comment's thread
view the rest of the comments
[-] Zak@lemmy.world 17 points 15 hours ago

I read the article, and I think DickHertz's comment is pretty much right. The article's example illustrates the point:

For example, Inc. columnist Jason Aten recently discovered that Meta's Muse AI assistant somehow had synced his entire local Messages database and was using those messages as context for its tasks.

Aten did not understand that the Messages database is stored on the disk (presumably) unencrypted and readable by anything with full disk access. He got a result he didn't want because he did not understand the implications of granting that permission, and Apple seeks to add more friction to the process to protect users from making that mistake.

[-] 4am@lemmy.zip 3 points 11 hours ago

Even if it was encrypted, it could be unlocked because with full disk access it can read the local private key, which probably doesn’t need a passphrase because it’s be a pain in the ass for the user to retype that every reboot or more

Starting to see why you shouldn’t let any corporate AI loose on your daily driver yet?

[-] Zak@lemmy.world 2 points 9 hours ago

Macs have a hardware secure enclave that apps can use to store keys where other apps can't access them. Apple itself does not seem to be making adequate use of it here.

[-] Grimy@lemmy.world 1 points 10 hours ago

I think his point was that apple would abuse it, like they are already doing. Good thing if implemented properly, bad thing if implemented the apple way.

this post was submitted on 05 Oct 2026
221 points (97.8% liked)

Technology

88607 readers
4060 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS