AI Agents and Permissions: Why Your Computer Asks Before Letting Software In

Why operating systems ask permission before an app reads your files, why full disk access is special, what changes when the software asking is an AI agent that acts on its own, how prompt injection turns an agent's permissions against you, and the old security principle that limits the damage.

0:39 How a computer asks for consent

Modern operating systems require user consent before apps reach protected folders or restricted data, and let users switch that access on or off per app.

Sources: Apple Platform Security (original) · Apple Support (original) · Android Developers (original)

2:06 The master key: Full Disk Access

Full Disk Access largely sidesteps the Mac's privacy controls so backup apps can work; Apple has said the risk grows as AI agents become more autonomous.

Sources: Apple Developer News (original) · Apple Platform Security (original)

3:28 What makes an agent different

Agents plan and act on their own over many steps, using tools; that autonomy brings compounding errors and calls for sandboxes and guardrails.

Sources: Anthropic Engineering (original) · OWASP Gen AI Security Project (original)

4:44 Prompt injection: when the data gives orders

Indirect prompt injection hides instructions in content an agent reads, such as a web page, a file or an email, and can turn the agent's permissions against its user.

Sources: OWASP Gen AI Security Project (original) · OWASP Gen AI Security Project (original)

6:03 The fix is an old one: least privilege

Give every program the smallest set of privileges it needs, check every access, and keep a human in the loop for high-impact actions.

Sources: Saltzer and Schroeder (original) · Saltzer and Schroeder (original) · OWASP Gen AI Security Project (original)

Follow the show in your podcast app to get each new episode as soon as it is out.

Produced by Juan Pablo.