Meta Muse在用户分享对话时暴露个人及商业机密
Meta Muse exposes users' personal and business secrets when they share conversations
Meta Muse在用户通过网页链接分享对话时暴露敏感信息，研究人员报告。Meta响应询问称将暂停分享功能以供审查。研究人员发现6,800个分享链接，其中数百个包含非公开信息。
同一件事另外 2 家也报道了
- Ars Technica · AI··首发·当前阅读
Meta Muse在用户分享对话时暴露个人及商业机密
- The Verge · AI··+5 小时 34 分
Meta 暂停 Muse 分享功能，因研究人员发现 AI 聊天链接公开可访问
新增信息：通过公共DNS记录公开可访问
- IT之家 · AI··+4 天
研究人员通过 DNS 数据库发现数千个公开的 Muse 聊天记录分享链接，Meta 已修复
新增信息：历史域名记录仍可检索
按发布时间排列 · 事件后续出现时自动追加 · 由模型根据各家标题与摘要比对
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
A single query is all that's required
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
来源: Ars Technica · AI · arstechnica.com