Meta restores Muse sharing after fixing easy-to-find public links

In short: Meta has turned Muse sharing back on and replaced old shared links with new ones after a privacy issue was reported.

What happened

Meta temporarily paused sharing in Muse, its AI assistant, after security researchers said public links to shared Muse pages were too easy to find. The researchers said they found examples that appeared to include sensitive business and personal information, like a marketing company’s internal revenue review and a small business owner’s loan application.

Researchers at Claroc said the problem involved the web addresses, also called URLs (the link you copy and paste), for shared Muse “artifacts.” Meta uses the word “artifacts” to mean items inside Muse, like documents and images. Claroc said these URLs were based on a conversation title and ended up in public DNS, which is like the internet’s phone book for website addresses.

On Oct. 22, Meta’s David Singleton said on X that “the underlying issue is now fixed, and sharing is back on.” He said the issue was with artifact URLs, not with the general ability to share chats. He also said that if you shared an artifact before the fix, it now has a new URL, and the old link will show a note telling visitors to ask the owner for the updated link.

Why it matters

Many people share AI chats the same way they share a Google Doc link. If those links can be guessed or found through public records, private work and personal details can leak even when you did not mean to publish them. Meta’s change means older shared links may break, and people who rely on those links will need to resend the updated ones.

Source: The Verge AI