TLDRocket
Sign in

Meta pauses Muse sharing after researchers find AI chats on the web

The Verge Emma Roth ● Covered by 2 sources

Meta paused a Muse sharing feature after researchers found some chat links sitting out in public on the web. The bug was simple but awkward: more than 6,800 Muse links were found through public DNS records.

Based on reporting by The Verge, Emma Roth — read the original for the full story.

Summary, retelling and take written by AI under human oversight; images are AI-generated illustrations. How we work · Report an error

Meta has paused a Muse feature that lets people share conversations with its AI assistant after researchers found those shared URLs were publicly discoverable on the web. Ars Technica reported the issue, and the discovery came from a report published this week by researchers at the security firm Claroc.

According to the report, Claroc found more than 6,800 Muse links by looking through public DNS records. That means the links were not just floating around in private messages or tucked away behind a login wall. They were exposed in a way that made them findable from the outside.

Meta says users can share specific Muse artifacts, and that this creates a page that can be accessed by anyone with the link. The company added that it has paused the feature while it reviews the report and considers changes to how those links can be shared.

This is the kind of AI feature that feels harmless until it isn’t. Sharing a chatbot exchange sounds casual, but once the links themselves show up where outsiders can find them, the privacy story changes fast.

My take — AI-written commentary, not fact-checked reporting

This is the usual AI-product trap: ship the shiny sharing button first, then discover the internet is very good at being the internet. Meta pausing the feature is the least surprising part; the real surprise is that anyone still treats “shareable by link” as if it means “private.”

Read more about this at: The Verge

Related stories

The daily briefing

Every AI story that matters, in your inbox by 8am.

TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.