Meta 暂停 Muse 分享功能,因研究人员发现 AI 聊天链接公开可访问
Meta pauses Muse sharing after researchers find AI chats on the web
Meta 暂停了 Muse 功能的分享功能,因研究人员通过公共 DNS 记录发现超过 6,800 个 Muse 链接公开可访问;研究人员指出,Meta 设计的链接方式使其容易被发现,导致数百个 Muse 聊天被公开,包括商业机密和私人信息。
同一件事另外 2 家也报道了
- Ars Technica · AI··首发
- The Verge · AI··+5 小时 34 分·当前阅读
Meta 暂停 Muse 分享功能,因研究人员发现 AI 聊天链接公开可访问
新增信息:通过公共DNS记录公开可访问
- IT之家 · AI··+4 天
研究人员通过 DNS 数据库发现数千个公开的 Muse 聊天记录分享链接,Meta 已修复
新增信息:历史域名记录仍可检索
按发布时间排列 · 事件后续出现时自动追加 · 由模型根据各家标题与摘要比对
Emma Roth
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO.
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS records.
“People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link,” Muse spokesperson Tracy Clayton says in an emailed statement to The Verge. “However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
The feature in question allows you to share your Muse conversation with someone else through a link. But, as pointed out by Claroc, the way Meta designed these links made them easy to find. “Muse builds each share’s web address from the share’s title, a short phrase describing the conversation, then a random ID,” Claroc says. “The hostname usually gave away what a page held before we opened it, and since the link carries that same title and ID, a hostname pulled from DNS rebuilds the link.”
By searching public DNS records, which serve as a directory for web traffic, Claroc was able to view hundreds of Muse conversations, including some containing a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. This isn’t the first time AI sharing features made chats more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have wound up on Google Search.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Emma Roth
来源: The Verge · AI · theverge.com