infwhispers

You don’t need https for a web running locally; nothing goes into the network. Malicious browser extension can be real, but if that is true, you might have bigger problems than leaking the apple graph

I could test on old OSs. Information might be there, but under different names / DBs that the tool does not catch

It is a sqlite db, so you can load it with that

It is in plaintext, but protected by TCC (so, only privileged apps / trusted by you can). Not sure about persistence. I believe it is rewritten periodically, possibly ignoring your edits

My bad. In my defense, only the technical parts are AI. But, thanks for the feedback; I thought I had unsloped it enough...

Yes, but having some kind of documentation and way to disable it would have been reasonable. Also, the thing is that it seems that apple intelligence models can query this information. So, you know, everything is a prompt injection away in theory.

Ack. For what I could see, specific tables are added / removed across versions. So, some information might not be visualized (e.g., the graph is tiny with few nodes).

I am the author of the research. Please, feel free to ask me anything. Also, check out the followup research: https://8rank.ai/game/apple-intelligence-knowledge-graph-in-...

The output stays local on your disk (in theory). So I’m not sure that breaks any rule. But in theory, Apple Intelligence can query it. Again, close to 0 documentation, so it is hard to know how this is consumed.

We also created a tool to inspect your graph: https://github.com/8rank/iKnow Only tested on recent MacOS versions (last 26s, and early 27s), though