Meta Pauses Muse Sharing After User Secrets Exposed
Meta paused Muse sharing after researchers found AI chat URLs publicly available.
"Yikes! Meta's Muse just spilled the tea on thousands of users' secrets. Sharing AI chats just got a whole lot riskier. Lock it down, Meta!"
Meta has paused a Muse feature that allowed users to share conversations with the AI assistant. This action follows a report by security firm Claroc, which found that URLs for these shared conversations were publicly available on the web. Researchers discovered more than 6,800 Muse links through public DNS records, as reported by Ars Technica and The Verge.
The design of these share links made them easily discoverable. Claroc explained that Muse built each share's web address from its title and a random ID, allowing the hostname to reveal content before opening. By searching public DNS records, Claroc accessed hundreds of conversations, including sensitive information like a marketing company's revenue review, a small business owner's loan application, and a workplace's full-year staff calendar.
Meta spokesperson Tracy Clayton stated that the functionality has been paused to review the report and consider changes to how these links can be discovered. Wired noted that the company is suspending the feature while it investigates its privacy, acknowledging a design flaw in the share links that exposed users' personal conversations.
This incident highlights critical privacy vulnerabilities in AI sharing features, underscoring the need for robust security protocols. Businesses and individuals using AI assistants must be aware of how shared information is handled and the potential for unintended public exposure, impacting confidential data and trust.
Find the right AI tool for your business
Chat with Insta and get matched to the right tool in seconds.
Try Insta Tool Finder →