Meta pauses Muse sharing after AI chats surface through public DNS records
in plain words
Meta has stopped a feature in its Muse AI assistant that let people share chats through web links. A security company found that many of these links could be found by searching DNS, the system that acts like a phone book for websites. Meta says it is reviewing the problem before it decides how to change the links.
Full summary
Meta says it has paused a feature in its Muse AI assistant that lets users share a conversation with someone else through a link. The pause followed reports that the web addresses for these shared pages could be discovered publicly. The Verge reports that the issue was first raised in coverage by Ars Technica.
In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS resolver A DNS resolver open for anyone on the internet to use. Full definition of public DNS resolver records. DNS Domain Name System The internet's directory that links domain names to computer addresses. Full definition of DNS, short for Domain Name System, works as a directory that connects web addresses to the servers that host them. By searching these records, Claroc says it was able to view hundreds of Muse conversations.
According to Claroc, the way Meta built the links made them easy to find. The firm says each address is made from the share’s title, a short phrase describing the conversation, followed by a random ID. Because the hostname often reflected the title, Claroc says a hostname taken from DNS could be used to rebuild the full link.
The exposed conversations reportedly included a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. Claroc’s researchers did not name these organizations in the source.
Meta spokesperson Tracy Clayton said in an emailed statement that users can share specific Muse artifacts, which creates a page that anyone with the link can access. Clayton said the company has paused this functionality while it reviews the report and considers changes to how the links can be discovered.
The source notes that AI sharing features have made chats more public than intended before. It says conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have appeared in Google Search results.