Meta Suspends Muse Chats Sharing Feature After It Left Private Details Exposed
Researchers accessed 6,800 shared conversations with the AI agent.
Meta
Meta debuted its Muse agentic AI platform last month and bug hunters have already uncovered a privacy problem. Users would share their Muse conversations by creating a URL, but that feature has been disabled after researchers found that anyone could potentially access those links.
Researchers at security firm Claroc discovered that the links for users' shared Muse chats can be found and accessed via a passive DNS search because all the URLs for sharing had the same domain name and used the conversation's title in the subdomain. Passive DNS are records of how human-readable domains resolve to browser-readable IP addresses, basically acting like a phone book for the Internet.
"Muse names each share's web address after the conversation's own title, and that address is written into public DNS," Claroc explained in a blog post. "One passive-DNS search brings back thousands...
Copyright of this story solely belongs to www.engadget.com. To see the full text click HERE
