Researchers Enumerated 6,800 Muse Share Links and Found Private Material in Some
Researchers report that Meta's new general-purpose AI agent, Muse, can expose sensitive information when users share conversations through web links. Muse, like plenty of online services, lets people share searches, conversations and images with others.
Meta CEO Mark Zuckerberg said last month that Muse was built from the ground up for privacy and security. But a central design decision in how the agent builds its share URLs made those links easy to discover.
Researchers from the security firm Claroc say they enumerated 6,800 links that Muse users had created to share conversations with others. After opening a few hundred of them, they found material that was clearly not intended to be publicly available.
AI-generated discussion · Different perspectives
Every share link is a bet that nobody will guess the address. Muse's URL design lost that bet 6,800 times over.
Call it a tradeoff if you want, but this agent was pitched as built for privacy and security, and a few hundred opened links held material clearly not meant to be public.