Meta pauses Muse sharing after researchers find AI chats on the web
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links t
Tech Close Tech Posts from this topic will be added to your daily email digest and your homepage feed.
AI Close AI Posts from this topic will be added to your daily email digest and your homepage feed.
News Close News Posts from this topic will be added to your daily email digest and your homepage feed.
A security firm discovered Muse chats containing a marketing company’s revenue, a workplace’s calendar, a loan application, and more.
Emma Roth Close Emma Roth News Writer Posts from this author will be added to your daily email digest and your homepage feed.
Share Gift Image: The Verge, Getty Images, Meta Emma Roth Close Emma Roth Posts from this author will be added to your daily email digest and your homepage feed.
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS records.
“People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link,” Muse spokesperson Tracy Clayton says in an emailed statement to The Verge. “However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
The feature in question allows you to share your Muse conversation with someone else through a link. But, as pointed out by Claroc, the way Meta designed these links made them easy to find. “Muse builds each share’s web address from the share’s title, a short phrase describing the conversation, then a random ID,” Claroc says. “The hostname usually gave away what a page held before we opened it, and since the link carries that same title and ID, a hostname pulled from DNS rebuilds the link.”
By searching public DNS records, which serve as a directory for web traffic, Claroc was able to view hundreds of Muse conversations, including some containing a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. This isn’t the first time AI sharing features made chats more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have wound up on Google Search.
Meta Close Meta Posts from this topic will be added to your daily email digest and your homepage feed.
Security Close Security Posts from this topic will be added to your daily email digest and your homepage feed.
A free daily digest of the news that matters most.