Meta Muse 分享對話連結可能暴露用戶個人及商業機密，Meta 暫停分享功能
Meta Muse exposes users' personal and business secrets when they share conversations
Meta 的通用 AI Agent Muse 分享對話連結被研究人員發現可暴露敏感資料，Meta 隨後暫停分享功能進行檢視。安全公司 Claroc 的研究人員稱，他們枚舉出 6,800 條用戶建立的分享連結，查看數百條後發現其中有不應公開的敏感資料。
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through Web links, researchers reported Monday. Shortly after Ars reported this research, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
A single query is all that's required
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
來源：Ars Technica · AI · arstechnica.com