Meta Muse share links expose private chats via passive DNS
Original title: Meta Muse exposes users' personal and business secrets when they share conversations
Claroc enumerated 6,800 links because every share hostname is under cf.metaaiusercontent.com and includes the chat title.
Security firm Claroc reported that Meta's Muse agent makes shared conversations easy to find. Share links use cf.metaaiusercontent.com and put the conversation name in the hostname, so a passive DNS query listed 6,800 links. After opening a few hundred, researchers found material users had not meant to publish, including an executive-search briefing, a company's revenue review, a loan application, a partial bank-account fraud alert, property financials, and a staff vacation calendar. Meta CEO Mark Zuckerberg had described Muse as built for privacy and security.
Unconfirmed: Only a few hundred of 6,800 links were opened, so the full set of exposed conversations is not described.
- Claroc said gathering the links took one passive DNS query.
- Researchers opened a few hundred of the 6,800 enumerated links.
- Exposed items included a partial account number, transaction amount, and property return figures.
- Discovery depends on the recipient loading the link so DNS sensors record the name.
Impact: Shared personal and business chat contents became publicly discoverable
| Product | Affected |
|---|---|
| Meta Muse | — |
- 1.Avoid sharing Muse conversations that contain secrets until link hostnames are no longer enumerable.
- AI models
- Muse
From the original article
2 min read at arstechnica.com
A single query is all that's required to find thousands of conversations listed by title.
By Dan Goodin · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.