If you’re trusting Meta with any information, you’re a fool.

investigators were able to easily open chat logs containing detailed private information, including corporate revenue documents, loan applications, bank transaction details, income details, and one workplace vacation calendar

I’m genuinely shocked that people thought it was a good idea to put any of that into Muse in the first place.

TLDR;

They make dns records for each shared chat log. Dns records can then easily be looked up and accessed

Unsafe: My-convo-with-PHI.aimetacontent.com Safe: Aimetacontent.com/l/random-hash/my-convo-with-PHI

As Ars Technica reported today, security researchers found Muse is capable of exposing sensitive information on its users through web links generated via a “share” feature.

It’s always the share feature isn’t it?

Meta promised an AI built from the ground up for privacy, then built a handy directory of strangers’ loan applications and bank records. Researchers needed one query. At this point Zuckerberg calling something »private« is less a security guarantee and more a spoiler warning.