Meta's Muse AI share pages can be found through public DNS records
in plain words
Meta’s AI helper, Muse, makes a web page when you share a chat. The web address of each page includes the chat’s title. Internet address records are public, so anyone can search them and find pages that were never sent to them. Some of these pages hold private information.
Full summary
talkback.sh reports that pages created when users share conversations with Meta’s personal AI agent, Muse, can be found by anyone who searches public DNS resolver A DNS resolver open for anyone on the internet to use. Full definition of public DNS resolver records. Muse publishes a shared conversation as a web page and gives the user a link. The page opens for anyone holding that link, without a login. Muse builds each page’s address from the conversation’s title and adds a random ID, and that hostname is written into public DNS.
The researchers ran a search against a commercial passive-DNS service, which indexes domain name A readable internet name made of labels separated by dots. Full definition of domain name that its resolver The DNS server that looks up domain names on behalf of users. Full definition of resolver observe, for hostnames under the content domain Muse uses for shares. Muse launched on September 8, 2026, and the search was run a month later. After removing noise from wildcard record A DNS record that answers for any undefined name under a domain. Full definition of wildcard record scans, more than 6,800 share hostnames remained. talkback.sh opened only a few hundred of them. Most opened without any account or sign-in, and many contained personal records and internal business documents. One example was a candidate’s confidential preparation for an executive-search call with a frontier AI lab, which included the lab’s internal contact and the meeting time.
The researchers also say that urlscan.io, a public URL-scanning service, holds more than 75 saved scans of Muse share pages. Their point is that the exposure is not limited to specialist tools.
talkback.sh says the problem is not limited to Muse. In 2025, shared ChatGPT conversations appeared in Google results, and OpenAI removed the option that made them indexable. Google later indexed more than 370,000 Grok conversations. Muse’s robots.txt asks search and AI crawlers to avoid share paths, but the researchers note that robots.txt controls crawling, not access, and their discovery did not involve a search engine.
Meta’s help page for Meta AI says that people with a shared link can see the conversation, that the link does not expire, and that recipients can share it again. talkback.sh describes this as the closest published account of how Meta’s AI share links behave, although the page covers Meta AI rather than Muse specifically.
DNS Domain Name System The internet's directory that links domain names to computer addresses. Full definition of DNS is the mechanism that exposes the pages. When someone opens a share, their browser resolves the hostname, and a passive-DNS provider whose resolvers see that lookup can record and index it. The random ID is meant to make guessing impossible, but the first lookup places the full hostname, ID included, into the public index. talkback.sh argues that an ID only protects a link while it stays secret, and a hostname is not secret.