Meta 修复 Muse 分享链接问题后重新开放分享
Meta turns Muse sharing back on
Meta 在安全研究者指出 Muse 公开对话链接易被找到后，重新开放了 Muse 分享功能。Claroc 研究者本周报告称，Muse 分享对话的网址以对话标题命名并写入公共 DNS，他们据此找到了营销公司的内部营收评估和小企业主的贷款申请。Meta 的 David Singleton 在 X 上表示底层问题已修复，问题出在分享产物的 URL 上，而非聊天分享本身；修复前分享过的产物已换新链接，访问旧链接会提示向分享者索取新链接。
推荐理由
AI 评分 58
事件呈现了分享链接泄露用户内容的具体路径，以及平台修复后旧链接失效的处理方式。
主题
正文
Meta has re-enabled Muse sharing after security researchers had reported that public conversation links could be easy to find. The researchers said they had been able to find Muse pages like a marketing company’s internal revenue review and a small business owner’s loan application.
Researchers at Claroc reported earlier this week that Muse the web addresses for shared conversations from Muse were named after a conversation’s title and written into public DNS. Ars Technica said Tuesday that Meta paused the sharing feature after it reached out about what was going on.
In a post today on X, Meta’s David Singleton says that “The underlying issue is now fixed, and sharing is back on.” According to Singleton, the issue was with URLs for shared Muse artifacts, which Meta says are things like documents and images inside Muse, and wasn’t a flaw with chat sharing.
“If you shared an artifact before the fix: it now has a new URL,” Singleton says. “Anyone visiting the old link will see a note asking them to get the new one from you. We know that’s a pain, and we’re sorry for the disruption — but protecting user data has to come first.”