We give developers powerful APIs to build incredible capabilities into their apps for Apple products, backed by a set of controls designed to protect users’ private data. Full Disk Access largely sidesteps these controls in order to allow backup apps to function properly on the Mac. Some developers are using Full Disk Access in ways that could put users at risk, exposing everything on their systems—including files, mail, messages, and even browsing history—without users’ full knowledge and understanding. For communication apps, this can also compromise the privacy of the people users are communicating with.Going forward, we will introduce additional controls to ensure that users who genuinely wish to grant an app this extraordinary level of access can only do so with very explicit user action. Addressing this is critical. As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially. We are committed to ensuring users clearly understand these risks before granting such access, so they can make informed decisions about their own data and privacy.
I’m unfamiliar with some of the tech stack at $WORK so I use Claude to navigate it. It’s very good at this sort of thing.
The Claude desktop app for MacOS was becoming more and more insistent on escalating privs that I ended up deleting it. It turns out that the web app works great if you add it to the dock from safari. It’s functionally identical to the desktop app but it doesn’t continually ask to install “plugins” in MacOS.
I used Claude code for a while, it is an excellent search engine for our large existing code base, but they took all the default guardrails away, so an innocuous prompt can have it write code, compile and attempt to run it, without permission.
I absolutely hate it. Using the products of these awful companies is bad enough. Giving them access to all my data is just asking for trouble.
While I work 100% remote from home, I find it convenient to have a separate machine for work. They don’t want me to use the work machine for personal stuff, which is fine since they paid for it. This strikes both ways; I don’t want the work machine to have access to my home network, so it gets its own access point. I also don’t have any personal data on the work machine. I do have a few accounts I use in both contexts (GitHub, iCloud, etc) that I’ve been thinking of changing so agents on my work machine don’t have access to my personal accounts however.
Yeah I WFH too. I have a separate MacOS account for work and non work. I never use Claude Code for my own projects but I’m not at all convinced that my personal stuff (or even my work stuff) is safe from these agents.
I have thought a few times about getting a separate machine for work but it feels wasteful. I might move to a coworking space next year, where it would make more sense. Also been thinking about moving to Linux since the latest MacOS update is no better than the last POS.
In the end it doesn’t really matter if it’s work or personal though, both environments contain private data and I’m not convinced any of these companies are incentivised to respect that.
I’m unfamiliar with some of the tech stack at $WORK so I use Claude to navigate it. It’s very good at this sort of thing.
The Claude desktop app for MacOS was becoming more and more insistent on escalating privs that I ended up deleting it. It turns out that the web app works great if you add it to the dock from safari. It’s functionally identical to the desktop app but it doesn’t continually ask to install “plugins” in MacOS.
I used Claude code for a while, it is an excellent search engine for our large existing code base, but they took all the default guardrails away, so an innocuous prompt can have it write code, compile and attempt to run it, without permission.
I absolutely hate it. Using the products of these awful companies is bad enough. Giving them access to all my data is just asking for trouble.
score 1 · canonical
While I work 100% remote from home, I find it convenient to have a separate machine for work. They don’t want me to use the work machine for personal stuff, which is fine since they paid for it. This strikes both ways; I don’t want the work machine to have access to my home network, so it gets its own access point. I also don’t have any personal data on the work machine. I do have a few accounts I use in both contexts (GitHub, iCloud, etc) that I’ve been thinking of changing so agents on my work machine don’t have access to my personal accounts however.
score 1 · canonical
Yeah I WFH too. I have a separate MacOS account for work and non work. I never use Claude Code for my own projects but I’m not at all convinced that my personal stuff (or even my work stuff) is safe from these agents.
I have thought a few times about getting a separate machine for work but it feels wasteful. I might move to a coworking space next year, where it would make more sense. Also been thinking about moving to Linux since the latest MacOS update is no better than the last POS.
In the end it doesn’t really matter if it’s work or personal though, both environments contain private data and I’m not convinced any of these companies are incentivised to respect that.
score 1 · canonical