Shared Meta Muse chats can expose personal and business details
Think twice before you share a link to a conversation. Security researchers found private details in shared chats, Ars Technica reports.
Researchers at the security firm Claroc found that share links from Meta's Muse assistant could be found by people who were never sent them. Each link put the conversation title in the web address, and public passive DNS records stored those addresses once a link had been opened. With one query, the researchers listed about 6,800 shared conversations.
In the few hundred they opened, they found a loan application, an internal revenue review, a staff vacation calendar and a bank fraud alert showing part of an account number. Meta told Ars Technica it has paused the sharing feature while it reviews the report. For anyone using AI assistants at work, a shared link can be far more public than it looks.
Before sharing an AI conversation by link, check what it contains and assume the link could be found by others. Keep client names, figures and account details out of conversations you plan to share.