Claroc researchers have reconstructed shared links of the Muse Assistant from public DNS data, outlining management notes, loan files and bank alerts. Meta suspended the function.
When a user asks Muse, Meta's AI assistant launched on September 8, to share a conversation, the service creates a public page with the address of the exchange title followed by a random identifier. Claroc's research team noticed that these readable hostnames ended up in "passive DNS" databases, which archive domains resolved by browsers. A single query on the domain Meta used for these shares was enough to list more than 6,800 addresses, with no login credentials or links passed on by anyone.
Sensitive content that can be guessed from the address
The researchers say they only opened a few hundred pages, but found executive prep notes, CEO-only revenue reviews, loan applications, bank fraud alerts, and vacation schedules. The headline visible in the address often betrayed the nature of the content before they even clicked. A public URL analysis service also kept more than 75 screenshots of Muse pages.
Claroc reported the issue to Meta's bug bounty program on October 8. It was after a question from Ars Technica on October 20 that Meta announced that it was suspending the sharing feature; the pages tested that day no longer opened. No malicious use has been reported at this stage.
Read the full article on the original source
Go to the source →