Meta pauses Muse conversation sharing after researchers find 6,800+ public AI chat links
Decision Brief
What changedMeta has paused Muse's conversation-link sharing feature after security firm Claroc found over 6,800 publicly accessible Muse chat links via public DNS records.
Why it mattersShare links were built from the conversation title plus a random ID appended to the domain, so DNS records alone were enough to reconstruct full links—any team shipping shareable conversation links should check whether their links can be enumerated.
Who should careAll AI builders
Affected stackNo specific stack identified
Source confidenceMedium · Reliable media or first-hand reporting
Meta said it has paused Muse's conversation sharing feature, which let users generate a link to a page containing their chat with the AI assistant, accessible to anyone with the link. Security firm Claroc reported finding more than 6,800 Muse share links through public DNS records. The flaw was in how links were constructed: Muse built share-page URLs from the conversation title plus a random ID, and the hostname itself exposed page content, so pulling hostnames from DNS records was enough to rebuild complete links.
Summary basis: full article readCompiled from the source scope noted above; the original remains authoritative.
Sources
- The Verge：AI
Consumer AI products, platform shifts, and policy/culture impact.
- The Verge：AI
留言
登入后即可留言，和其他 builder 交换实测心得。
还没有留言，抢头香。