‹ BackHN Continuity

Thread

Unsurprisingly, Meta's new Muse AI agent blatantly ignores users permissions

163 points · 43 comments · dkobia

  1. jkingsman · · focus · HN ↗
    I'm no evangelist for LLM assistants, but this seems incredibly improbable and represents a failure of MacOS security if so. If full disk access isn't granted, Mac blocks it from the Downloads folder, to say nothing of actually sensitive paths. I would expect a far more likely case of an accidentally granted permission on another device or a permission that was on and then turned off.

    Permissionless action is about to skyrocket as an issue, but this particular scenario strikes me as incredibly unlikely. Would be interested to know if Muse can provide more meaningful data provenance/logs.

    Scanning iMessage dbs as a passive part of full disk access (and not a messages grant), if true, is a little sketchy, regardless.

    1. kstrauser · · focus · HN ↗
      Nothing you said was wrong, but I can’t imagine giving Meta the benefit of the doubt on, well, anything. Fool me once, shame on you. Fool me 137 times…
      1. pasteleft · · focus · HN ↗
        Either Muse somehow bypassed the MacOS's security or Muse was able to access Messages without explicit permission. It is Muse's fault, but I also agree that it is MacOS's fault too.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.