If you're trusting Meta with any information, you're a fool.
this post was submitted on 21 Oct 2026
206 points (98.6% liked)
Technology
89000 readers
3790 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
I believe Meta's founder and CEO himself uses the technical term "dumb fuck" to qualify these people.
investigators were able to easily open chat logs containing detailed private information, including corporate revenue documents, loan applications, bank transaction details, income details, and one workplace vacation calendar
I'm genuinely shocked that people thought it was a good idea to put any of that into Muse in the first place.
I mean, they are airing ads about using their AI like a personal assistant, including to pay bills. So not just knowing financial details, literal approval to spend your money for you. I hope not many people are doing that, but I'm sure some are. Absolutely insane.
It would be a prudent move for your mental health to lower you're expectations a tiny bit
Not a particularly well-written article. The referenced Ars Technica article actually explains the problem:
Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
... a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available.
Claroc researchers were able to discover the Muse share links because all of them use the domain name cf.metaaiusercontent.com. Discovery is further made easy by the decision to add the conversation name to the URL, along with a long string of text... It’s this last design decision, putting the conversation title in the subdomain rather than in the URL path, that makes public discovery possible.
I would not call 9f21c8a3 long
Wow.
Meta promised an AI built from the ground up for privacy, then built a handy directory of strangers’ loan applications and bank records. Researchers needed one query. At this point Zuckerberg calling something »private« is less a security guarantee and more a spoiler warning.
"The engineer who spent last week writing it assured Zuck that every prompt used to write it closed with make no mistakes"
If that's not solid engineering then that engineer doesn't know what it is.
It's built for privacy in that its so bad that it causes a very small subset of people to start thinking about why privacy is a good thing actually...
TLDR;
They make dns records for each shared chat log. Dns records can then easily be looked up and accessed
Unsafe: My-convo-with-PHI.aimetacontent.com Safe: Aimetacontent.com/l/random-hash/my-convo-with-PHI
As Ars Technica reported today, security researchers found Muse is capable of exposing sensitive information on its users through web links generated via a “share” feature.
It's always the share feature isn't it?