Meta pauses Muse sharing after researchers find AI chats on the web
Meta pauses Muse sharing after researchers find AI chats on the web
Meta has disabled the sharing feature for Muse, as researchers discovered over 6,800 publicly accessible Muse links through public DNS records; researchers noted that Meta's link design made them easily discoverable, leading to hundreds of Muse chats being exposed, including confidential business information and private data.
Same story2 other outlets also reported this
- Ars Technica · AI··First
Meta Muse exposes personal and business secrets when users share conversations
- The Verge · AI··+5 h 34 min·Reading now
Meta temporarily pauses Muse sharing feature as researchers find AI chat links publicly accessible
Adds:publicly accessible via public DNS records
- ITHome · AI··+4 d
Researchers discovered thousands of publicly shared Muse chat record links through the DNS database, and Meta has fixed them.
Adds:historical domain records still retrievable
In order of publication · later reports are added as they appear · Compared by AI from each outlet’s title and summary
Emma Roth
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO.
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS records.
“People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link,” Muse spokesperson Tracy Clayton says in an emailed statement to The Verge. “However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
The feature in question allows you to share your Muse conversation with someone else through a link. But, as pointed out by Claroc, the way Meta designed these links made them easy to find. “Muse builds each share’s web address from the share’s title, a short phrase describing the conversation, then a random ID,” Claroc says. “The hostname usually gave away what a page held before we opened it, and since the link carries that same title and ID, a hostname pulled from DNS rebuilds the link.”
By searching public DNS records, which serve as a directory for web traffic, Claroc was able to view hundreds of Muse conversations, including some containing a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. This isn’t the first time AI sharing features made chats more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have wound up on Google Search.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Emma Roth
Source: The Verge · AI · theverge.com