←新闻详情

David Singleton更新于 10月16日 11:21

Meta 为每位 Muse 用户提供免费云端 Linux 虚拟机

I’ve seen a couple of posts about this so wanted to demystify. Today, every Muse user gets a free computer in the cloud. It's a real computer, and we’ve designe

AI 导读

Meta 的 David Singleton 宣布,今天起每位 Muse 用户都能获得一台免费的云端计算机,即 Muse Secure VM。该虚拟机拥有独立的 root 文件系统(含完整 Ubuntu Linux 镜像),用户可安装软件、编写和编译代码、用浏览器上网;运行时单元内的活动不受限制,但敏感操作由运行在该单元之外的 Sentinel 监管,密码等敏感密钥也存放在运行时单元之外,以防范提示注入等威胁。UI 的 Library 标签内置文件浏览器,用户可查看 Muse 写下的 markdown 文件;还可在 Settings > Data controls > Download your agent data 下载自己创建的数据。

推荐理由

AI 评分 63

Meta 员工披露 Muse 云端虚拟机与 Sentinel 隔离架构,读者可了解智能体执行环境如何兼顾开放操作与提示注入防护。

主题

标签

正文

当前显示原文,中文全文译文尚未就绪。

I’ve seen a couple of posts about this so wanted to demystify. Today, every Muse user gets a free computer in the cloud. It's a real computer, and we’ve designed the security architecture of the Muse Secure VM carefully so you and your Muse can do almost anything you could with a computer sitting under your desk while keeping you and the system safe from threats like prompt injection. We wrote about this at length in our security blog post – https://t.co/7HmiTrzoTd. Activity in the “runtime cell”, which you share with your Muse is unfettered, but sensitive actions are all overseen by the Sentinel, which runs outside of that cell. Similarly, all sensitive secrets - like the passwords you enter into Muse’s secure credential storage - are also stored outside the runtime cell.

This was a very deliberate choice - your Muse Secure VM truly is your own computer in the cloud. You can install software in it, write and compile code, use the browser to surf the web: it is your own Linux box that you can operate as you choose with your Muse. Poking around in this computer doesn't give you any privileged access to Meta infrastructure, or to other people's data

If I may geek out a little here for a second… As a kid I loved to take things apart to see how they worked. As a teenager I got into computers and soon found myself drawn to C:\WINDOWS\SYSTEM and the system registry, later Slackware’s /dev/, /proc/ etc – I could see how the system was laid out and as I explored what DLL files and .so files actually did, I gradually became able to meld the computer to my own will.

We’re really proud to be able to put a real computer in millions of people’s hands with a similar level of transparency. We built a file explorer right into the Library tab of the UI. We want you to be able to see the markdown files Muse writes while it thinks about how to serve you better, and explore the internals of the system if you’d like to.

So, when you ask your Muse to show you its entire filesystem, and receive gigabytes of files you’re seeing the full contents of the runtime cell. It’s yours to explore and enjoy!

If you’re not a geek like me, or simply want to download the data that you personally have created directly with your Muse, we added a feature for that too in Settings > Data controls > Download your agent data.

来源

David Singleton