frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Unsurprisingly, Meta's new Muse AI agent blatantly ignores users permissions

https://appleinsider.com/articles/26/09/28/metas-new-ai-agent-blatantly-ignores-users-permissions
89•dkobia•1h ago

Comments

ParanoidShroom•52m ago
How is this possible? Apple messages are just free for anyone to read?
daishi55•45m ago
It’s not possible. User error lol
ryandrake•42m ago
At least on Unix-like systems, if it's free for you to read, then it's free for any process you run as you to read. Sure, macOS has grafted its own weird "permissions" layer on top of the existing OS level permissions, but at the end of the day, when you run an app on Unix, you're allowing it to act as you, with all the powers your user has.

This used to work when you could trust the software you ran on your system to have access to everything you have access to on your computer. I'd argue that time has largely passed, for most third-party commercial developers and even for some OS vendors.

Best solution is to simply not run software made by blatantly untrustworthy developers. Second best solution would be to run such software as a severely sandboxed user who basically doesn't have access to anything important on your system.

graemep•31m ago
I do not know about all Unix like OSes, but Linux has sandboxes you can run as you main user. Not as safe as running as a separate user and sandboxing, or running in a VM, but reasonably solid.

> I'd argue that time has largely passed, for most third-party commercial developers and even for some OS vendors.

Agreed, but what can you do about your OS vendor?

red_admiral•19m ago
In theory, iOS has some protection: the security model is that not all apps can be trusted with everything, so they have to ask for permission to access camera, GPS, texts and so on. I think apple even kicks apps out of its store that try and abuse this.
brigade•6m ago
App store apps are required to run in a sandbox that denies file accesses without user permission.

Muse is not available in the macOS app store. Almost certainly because of the sandboxing requirements.

anonymousDan•15m ago
My mental model is to treat AI agents running on your system as a form of malware that is running in a honeypot you control. You don't want to just get rid of it as you want to observe its behaviour (in the case of malware) or hopefully do something useful (AI). But you certainly shouldn't assume it won't do anything bad to your system.
VCFundedGenYer•51m ago
I think what’s more alarming is the macOS nannying UAC-like toggles to block disk access and other “protections” are apparently all UX reducing flash and no actual functionality.

I’d argue this is a five alarm fire for macOS and Meta simply exploited it.

PaulHoule•29m ago
Personally that stuff drives me up the wall, it's the Mac wanting to become the iPhone and close off everything but the App Economy. They'll geofence XCode to the Bay Area or something so only "professionals" can develop software and eventually ban web browsers.
dec0dedab0de•23m ago
I think we need more granular permissions, and built in ways to trick apps into thinking they have permissions they do not.
jkingsman•50m ago
I'm no evangelist for LLM assistants, but this seems incredibly improbable and represents a failure of MacOS security if so. If full disk access isn't granted, Mac blocks it from the Downloads folder, to say nothing of actually sensitive paths. I would expect a far more likely case of an accidentally granted permission on another device or a permission that was on and then turned off.

Permissionless action is about to skyrocket as an issue, but this particular scenario strikes me as incredibly unlikely. Would be interested to know if Muse can provide more meaningful data provenance/logs.

Scanning iMessage dbs as a passive part of full disk access (and not a messages grant), if true, is a little sketchy, regardless.

bethekidyouwant•48m ago
How is this a story anybody who knows how a computer works knows this is nonsense.
iamacyborg•23m ago
The story from Hunterbrook is also pretty crazy with Muse having much more access to Meta’s social graphs than I suspect most users would hope.

https://hntrbrk.com/breaking-news/muse-doxxing

lapcat•12m ago
> After doing a little digging, Aten says Muse synced 187,000 lines from his Messages database, despite Full Disk Access being off.

This is absolutely untrue, and impossible.

I haven't spoken directly with Aten, but I have second-hand information from someone who has spoken directly with Aten, and it turns out that he has two Macs and may have allowed Full Disk Access to Muse on one of them.

Claude partial outage

https://status.claude.com/incidents/4xvtc2gnq73l
126•sidcool•1h ago•89 comments

macOS Golden Gate Is a Buggy Mess

https://www.squareorbits.com/blog/2026/09/macos-golden-gate-is-a-buggy-mess/
118•SquareOrbits•1h ago•66 comments

How Delhi Cut Electricity Loss from 50 to 5 Percent

https://spectrum.ieee.org/delhi-electricity-loss
204•rbanffy•2h ago•125 comments

AI companies leak data to advertisers [pdf]

https://jorgegarciaherrero.com/wp-content/interactivos/20260916-Prompt-like-a-butterfly-sting-lik...
325•damaru2•6h ago•104 comments

America.gov – Whatever you need from government, start here

https://america.gov/
30•plesiv•1h ago•10 comments

Jeeves. Reasoning improves Jev-like decision models

https://github.com/PostHog/jeeves
144•nicowaltz•4h ago•63 comments

Without the Hot Air

https://www.withouthotair.com/
68•0sake_rs•2h ago•35 comments

Unsurprisingly, Meta's new Muse AI agent blatantly ignores users permissions

https://appleinsider.com/articles/26/09/28/metas-new-ai-agent-blatantly-ignores-users-permissions
90•dkobia•1h ago•15 comments

You Are No Longer Invited to Dinner

https://www.derekthompson.org/p/the-death-of-the-american-host
434•barry-cotter•4h ago•378 comments

500k facial scans at UK stations yield no arrests, 1 false positive

https://www.theguardian.com/technology/2026/sep/29/trial-live-facial-recognition-cameras-london-s...
289•ilamont•3h ago•199 comments

What makes software development engineering

https://parksb.github.io/en/article/44.html
26•ibobev•2h ago•26 comments

Using any C++ library in Godot

https://blog.conan.io/cpp/conan/gamedev/godot/cmake/2026/09/29/Using-Any-Cpp-Library-In-Godot.html
118•czoido•6h ago•30 comments

Digital Audio on the ZX Spectrum's 1-Bit Beeper

https://bumbershootsoft.wordpress.com/2026/09/26/digital-audio-on-the-zx-spectrums-1-bit-beeper/
25•ibobev•1d ago•6 comments

Why Doesn't Anyone Want to Fix One of America's Scariest Roads?

https://www.newyorker.com/magazine/2026/10/05/why-doesnt-anyone-want-to-fix-one-of-americas-scari...
9•adrianhon•1h ago•7 comments

Google ending ChromeOS support two years early

https://www.theregister.com/os-platforms/2026/09/29/google-ending-chromeos-support-two-years-earl...
40•rbanffy•1h ago•18 comments

Phyllotaxis: An audio-reactive LED display

https://jagi.studio/posts/phyllotaxis/
202•evakhoury•23h ago•30 comments

US sanctions force The Netherlands off Microsoft and toward alternative NixOS

https://www.tomshardware.com/software/the-netherlands-is-rolling-alternative-nixos-based-software...
299•mywacaday•3h ago•251 comments

1 in 8 cancer cases worldwide are caused by infections, study finds

https://www.cbc.ca/lite/story/9.7361622
70•colinprince•3h ago•44 comments

Show HN: Raven – The harness of harnesses, built for RSI

https://github.com/EverMind-AI/Raven
42•cyfyifanchen•5h ago•33 comments

Booted up in 1993, this server still runs – but not for much longer (2017)

https://www.computerworld.com/article/1673071/booted-up-in-1993-this-server-still-runs-but-not-fo...
137•doener•1d ago•71 comments

Show HN: Jevstiller – Distill Jev into a local model, with a disagreement bound

https://jevstiller.pages.dev/posts/the-guarantee/
15•tgluck•3h ago•3 comments

Georeferencing Chernarus and visiting in real life (2021)

https://longcreek.me/blog/2021/chernarus-irl
8•carlos-menezes•1d ago•0 comments

California farmers are struggling to sell grapes as demand for wine drops

https://www.kqed.org/news/12101534/california-farmers-are-struggling-to-sell-grapes-as-demand-for...
312•randycupertino•19h ago•758 comments

The systems that no one will test

https://blog.christianperone.com/2026/09/the-systems-that-no-one-will-test/
117•perone•1d ago•50 comments

Software occlusion culling in Block Game

https://enikofox.com/posts/software-rendered-occlusion-culling-in-block-game/
67•airhangerf15•2d ago•4 comments

Four CHI '26 papers I wish I wrote

https://countingfromzero.blog/2026/04/24/four-chi-26-papers-i-wish-i-wrote/
32•luu•2d ago•8 comments

The Beatles have permeated research papers across academic disciplines

https://phys.org/news/2026-09-beatles-permeated-papers-academic-disciplines.html
15•pseudolus•2d ago•11 comments

Pirating the Pirates

https://mubi.com/en/notebook/posts/pirating-the-pirates
652•piotrgrabowski•23h ago•337 comments

Optimizing x264 settings and per-title ladders

https://streaminglearningcenter.com/articles/optimizing-x264-settings-and-per-title-ladders.html
20•dabinat•2d ago•4 comments

Tank Body Problem

http://www.jimsitu.com
163•jimbooonooo•14h ago•34 comments