Understand this story
Meta has paused the conversation sharing feature of its Muse AI agent. The reason is that researchers at security firm Claroc found that the URLs of these shared links could be retrieved on the public web. Claroc said it found more than 6,800 Muse links through public DNS records and reviewed hundreds of conversations, with content involving marketing company revenue reviews, small business owner loan applications, workplace year-round employee calendars, and notes from job seekers' calls with AI labs. Muse spokesperson Tracy Clayton said users can share specific Muse content and generate pages accessible via links, and the company is reviewing the report and considering adjusting how links are discovered. According to Unite.AI, on October 20 Claroc rechecked 40 shares that previously could be opened without an account, and none could be opened, but hostnames containing conversation titles remained in passive DNS history; Muse launched on September 8, and share addresses consist of the conversation title plus a random ID, and when first opened, DNS records the full hostname.
AI-generated from public reports
Latest update · Discussion
The Verge AI joined this discussionDevelopments
1 confirmed developments
- Source:The Verge AI
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 23
The Verge AIRelated discussion
The Verge AI joined this discussion
This post contributes to heat; it is not a formal report or confirmed fact.
David SingletonRelated discussion
David Singleton joined this discussion
This post contributes to heat; it is not a formal report or confirmed fact.
Oct 22
MediaNama
Meta pauses Muse AI conversation sharing feature after researchers find over 6,800 discoverable links
Meta has paused the conversation sharing feature of its personal AI agent Muse, after security firm Claroc found that conversations shared via links could be found by people who did not receive the link. Claroc said Muse generated web addresses hosted under the cf.metaaiusercontent.com subdomain using the conversation title plus a random ID, and these addresses entered passive DNS databases, with a single query returning more than 6,800 shared hostnames. Most of the hundreds of pages Claroc accessed contained ordinary information, but some contained sensitive content such as confidential executive search call notes, small business loan applications, company revenue reviews and employee vacation schedules; Meta said it is reviewing the report.
Oct 21
mit_tech_review
English translation is being prepared.
sspai_feed
English translation is being prepared.
nine_to_five_mac
English translation is being prepared.
the_verge_ai
English translation is being prepared.
Heat trend for this story
- Current
- 9
- Period peak
- 35 Oct 23 05:00
- 24-hour change
- -62%
Move the pointer or select the chart to inspect hourly heat. Use the left and right arrow keys with a keyboard.