Meta says it has suspended a Muse feature that lets you share conversations with the AI assistant after researchers found the publicly accessible URLs on the web, as reported Ars Technica. In a report released this week, researchers at security firm Claroc say they found more than 6,800 Muse links through public DNS records.
“People have the ability to share specific Muse artifacts, which creates a page accessible to those who have the link,” Muse spokesperson Tracy Clayton said in an emailed statement to The edge. “However, we have suspended this functionality while we review this report and consider changes to how these links may be discovered.”
The feature in question allows you to share your Muse conversation with someone else via a link. But, as Claroc pointed out, the way Meta designed these links made them easy to find. “Muse constructs the web address of each share from the title of the share, a short sentence describing the conversation, and then a random identifier,” Claroc explains. “The hostname generally reveals what a page contained before we opened it, and since the link has the same title and ID, a hostname retrieved from DNS reconstructs the link.”
By searching public DNS records, which serve as a directory for web traffic, Claroc was able to view hundreds of Muse conversations, including some containing a marketing company’s revenue review, a small business owner’s loan application, a workplace’s annual staff calendar, and notes for a candidate’s call with an AI lab. This isn’t the first time AI’s sharing features have made discussions more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok ended up on Google Search.
Gn bussni
