Meta's Muse AI Is in Hot Water
Meta is facing renewed scrutiny after researchers showed that shared Muse AI pages could appear in public DNS records.
Earlier this month, security firm Claroc found that Muse made share links (the links generated when you click to share a Muse chat or page with someone else) using the domain cf.metaaiusercontent.com. When the recipient clicked the link, services that keep records of domain lookups could track the hostname. Researchers then pieced together working links and found over 6,800 share addresses—a discovery they say took very little effort. Among the pages were a small business owner's loan application and a real estate investor's internal performance report, complete with addresses and income information.
Claroc says its researchers contacted Meta's bug bounty program on October 8, but it wasn't until Ars Technica asked about the vulnerability on October 20 that Meta said it would temporarily suspend Muse chat sharing. Affected artifacts received new...
Copyright of this story solely belongs to www.extremetech.com. To see the full text click HERE
