Meta re-enables Muse sharing after replacing exposed artifact URLs
Original title: Meta turns Muse sharing back on
Old shared-artifact links now ask visitors to request a new URL from the person who shared them.
Meta turned Muse sharing back on after researchers reported that public links to shared conversations could be easy to find. Claroc said shared Muse web addresses were named after conversation titles and written into public DNS. Meta's David Singleton said the fixed issue concerned URLs for shared artifacts such as documents and images, not chat sharing, and that previously shared artifacts received new URLs.
Unconfirmed: The report does not say whether anyone besides researchers accessed the exposed pages.
- Researchers said they found pages including a revenue review and a loan application.
- Ars Technica reported Meta paused sharing after being contacted.
- Singleton said anyone using an old link must obtain the new URL from the sharer.
- Meta described the problem as limited to shared artifacts, not chat sharing.
Impact: Shared Muse artifacts were reachable through easy-to-find public URLs
| Product | Affected |
|---|---|
| Meta Muse | — |
- 1.Request the new URL from the sharer before opening an old Muse artifact link.
From the original article
1 min read at theverge.com
Meta has re-enabled Muse sharing after security researchers had reported that public conversation links could be easy to find. The researchers said they had been able to find Muse pages like a marketing company's internal revenue review and a small business owner's loan application.
By Jay Peters · theverge.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.