Meta Muse Exposes Users' Personal, Business Secrets When They Share Conversations
Security researchers say Meta's Muse AI assistant exposed thousands of users' shared conversations because conversation titles were placed in subdomains that could be discovered through public DNS records. Meta has since suspended the sharing feature while it considers making changes. Ars Technica reports: Like many online services, Muse has allowed users to share searches, conversations, images,…
Meta's AI assistant, Muse, has inadvertently exposed thousands of users' shared conversations due to how the conversation titles were included in the URLs. These URLs were placed in subdomains, making them discoverable through public DNS records. The sharing feature has been suspended while Meta considers potential changes. Ars Technica reports that the issue arose from a design decision to include conversation titles in the subdomain instead of the URL path, allowing for easy discovery.
Passive DNS records, which store DNS resolution history, enabled researchers to uncover over 6,800 URLs used to share conversations. Once opened, these links revealed information that was not meant to be publicly accessible.
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
