Technology
Researchers say Meta Muse exposed thousands of shared user conversations
Claroc reports enumerating 6,800 share links, and Meta has paused the feature while it reviews changes.
The short version
- Security researchers say Meta's Muse AI assistant exposed thousands of users' shared conversations.[Slashdot]
- Claroc researchers say they enumerated 6,800 share links, which were discoverable through public DNS records.[Slashdot]
- Meta has paused the sharing feature while it reviews the report and considers changes, with no reported restart timeline.[Engadget · Slashdot]
Key facts
- Claroc researchers said they were able to enumerate 6,800 links Muse users created to share conversations.[Slashdot]
- Researchers say conversation titles were placed in subdomains that could be discovered through public DNS records.[Slashdot]
- Researchers say the Muse share links all use the domain cf.metaaiusercontent.com, which allowed them to be discovered.[Slashdot]
- Meta has suspended the sharing feature while it considers making changes.[Slashdot]
- Meta said in a statement that it paused this functionality while reviewing the report and considering changes to how links can be discovered.[Engadget]
What remains uncertain
- Researcher claims about the total number of affected users and the content of exposed conversations are not independently verified in the provided reporting.[Engadget · Slashdot]
- Whether Meta will restore the sharing feature or change how share links work is undecided, and no timeline was reported.[Engadget · Slashdot]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.