---
id: "39393a40-2db4-41a8-881e-38e3b3b27685"
kind: "link"
title: "Meta's Muse AI share pages can be found through public DNS records"
language: "en"
section: "security"
date: "2026-10-20T07:27:23Z"
updated: "2026-10-20T07:27:23Z"
canonical: "https://tldlog.com/l/metas-muse-ai-share-pages-can-be-found-through-public-dns/"
origin: "master"
translations:
  es: "https://tldlog.com/es/l/paginas-compartir-muse-ia-meta-pueden-encontrarse-registros/"
  de: "https://tldlog.com/de/l/metas-muse-ki-freigabeseiten-sind-oeffentliches-dns/"
  fr: "https://tldlog.com/fr/l/pages-partage-muse-ia-meta-sont-accessibles-enregistrements/"
  it: "https://tldlog.com/it/l/pagine-condivisione-muse-ia-meta-si-trovano-tramite-record/"
  pt-BR: "https://tldlog.com/pt/l/paginas-compartilhamento-muse-ai-meta-podem-ser-encontradas/"
  ru: "https://tldlog.com/ru/l/stranitsy-muse-ai-meta-otkrytye-obshchego-dostupa-mozhno/"
  zh-Hans: "https://tldlog.com/zh/l/meta-muse-rengongzhineng-fenxiang-dns/"
source:
  name: "talkback.sh"
  url: "https://blog.claroc.io/ghostshares-muse-passive-dns/"
  language: "en-US"
  date: "2026-10-18T21:30:45Z"
---

# Meta's Muse AI share pages can be found through public DNS records

## in plain words

Meta’s AI helper, Muse, makes a web page when you share a chat. The web address of each page includes the chat’s title. Internet address records are public, so anyone can search them and find pages that were never sent to them. Some of these pages hold private information.

talkback.sh reports that pages created when users share conversations with Meta’s personal AI agent, Muse, can be found by anyone who searches public DNS records. Muse publishes a shared conversation as a web page and gives the user a link. The page opens for anyone holding that link, without a login. Muse builds each page’s address from the conversation’s title and adds a random ID, and that hostname is written into public DNS.

The researchers ran a search against a commercial passive-DNS service, which indexes domain names that its resolvers observe, for hostnames under the content domain Muse uses for shares. Muse launched on September 8, 2026, and the search was run a month later. After removing noise from wildcard DNS scans, more than 6,800 share hostnames remained. talkback.sh opened only a few hundred of them. Most opened without any account or sign-in, and many contained personal records and internal business documents. One example was a candidate’s confidential preparation for an executive-search call with a frontier AI lab, which included the lab’s internal contact and the meeting time.

The researchers also say that urlscan.io, a public URL-scanning service, holds more than 75 saved scans of Muse share pages. Their point is that the exposure is not limited to specialist tools.

talkback.sh says the problem is not limited to Muse. In 2025, shared ChatGPT conversations appeared in Google results, and OpenAI removed the option that made them indexable. Google later indexed more than 370,000 Grok conversations. Muse’s robots.txt asks search and AI crawlers to avoid share paths, but the researchers note that robots.txt controls crawling, not access, and their discovery did not involve a search engine.

Meta’s help page for Meta AI says that people with a shared link can see the conversation, that the link does not expire, and that recipients can share it again. talkback.sh describes this as the closest published account of how Meta’s AI share links behave, although the page covers Meta AI rather than Muse specifically.

DNS is the mechanism that exposes the pages. When someone opens a share, their browser resolves the hostname, and a passive-DNS provider whose resolvers see that lookup can record and index it. The random ID is meant to make guessing impossible, but the first lookup places the full hostname, ID included, into the public index. talkback.sh argues that an ID only protects a link while it stays secret, and a hostname is not secret.

Source: [talkback.sh](https://blog.claroc.io/ghostshares-muse-passive-dns/)