Meta Muse exposes users' personal and business secrets when they share conversations
Meta Muse exposes users' personal and business secrets when they share conversations
Meta Muse exposes sensitive information when users share conversations via web links, researchers report. Meta responded to inquiries by saying it will pause the sharing feature for review. Researchers found 6,800 sharing links, hundreds of which contained non-public information.
Same story2 other outlets also reported this
- Ars Technica · AI··First·Reading now
Meta Muse exposes personal and business secrets when users share conversations
- The Verge · AI··+5 h 34 min
Meta temporarily pauses Muse sharing feature as researchers find AI chat links publicly accessible
Adds:publicly accessible via public DNS records
- ITHome · AI··+4 d
Researchers discovered thousands of publicly shared Muse chat record links through the DNS database, and Meta has fixed them.
Adds:historical domain records still retrievable
In order of publication · later reports are added as they appear · Compared by AI from each outlet’s title and summary
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
A single query is all that's required
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
Source: Ars Technica · AI · arstechnica.com