2026-10-03 10:25 UTC
Apple announces 'Full Disk Access' control changes on macOS due to AI agents abusing APIs to access users data, mail, pictures without knowledge. This will prevent AI agents getting unauthorised access by default. https://developer.apple.com/news/?id=p6zjojqw
Good thing is I don't have any AI agents installed on Linux desktop. But I am afraid slop is slowing getting in as Linux kernel and others FLOSS projects started accepting slop based patches. Ugh!
Replies (2)
-
@mavu@mastodon.social 2026-10-03 11:14
@nixCraft@mastodon.social don't worry, slop will reduce once the capital stops subsidizing inference costs.
-
@mazerty@mastodon.social 2026-10-04 05:00
@nixCraft@mastodon.social on any debian-based distro, you can prevent any binary from accessing private user files by setting up an apparmor profile that loads the debian-maintained "abstraction" called "private-files-strict" it protects ssh keys, aws credentials and firefox profiles amongst others here (line 20) is an example for "mise", the node version manager that i use: https://codeberg.org/mazerty/hub/src/branch/omega/root/script-mise line 27, the "i" flag ensures that every process spawned by mise inherits the same restrictions