Meta pauses Muse sharing after researchers find thousands of "private" shared chats through DNS records
Ars explains the design choice that made the links findable; Claroc's post shows the method.
Researchers at security firm Claroc say they found 6,800 links that users of Meta's Muse AI agent had created to share conversations, and that opening a few hundred turned up material clearly not meant to be public, Ars Technica reports. Examples include a candidate's notes for a confidential call with a frontier AI lab, a company's internal revenue review, a small-business loan application and a staff vacation calendar.
The cause, Ars says, is that Muse puts the conversation title in the link's subdomain on a single Meta domain. When a recipient opens the link, the name passes through DNS and can end up in commercial passive-DNS databases that anyone can search. Claroc calls these "GhostShares." "It took one query," the researchers wrote.
Claroc's CTO says he reported the issue through Meta's bug bounty on October 8. Meta told Ars it has paused the sharing feature while it reviews the report and considers changes to how links can be discovered.
-
Capability-based security
After exploring Meta Muse exposes users' personal and business secrets when they share conversations, the security model share links lean on is Capability-based security.
Explains security built on unforgeable tokens of authority, the idea behind 'anyone with the link' sharing.
Wikipedia · Wade · 5 min
0