Meta Muse 分享链接暴露用户隐私，Meta 暂停分享功能
Meta Muse exposes users' personal and business secrets when they share conversations
Meta 的通用 AI 智能体 Muse 在用户通过网页链接分享对话时会暴露敏感信息，Meta 表示已暂停该分享功能并正在评估修改。安全公司 Claroc 的研究人员称，Muse 生成分享 URL 的核心设计使链接容易被发现，他们枚举出 6800 条用户创建的分享链接，打开其中数百条后发现了明显不应公开的信息。Meta CEO 扎克伯格上月称 Muse 是“从底层为隐私和安全而构建”的。
Meta 的 Muse 分享链接可被枚举，研究人员据此打开数百条会话并发现敏感信息，Meta 已暂停该功能。
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through Web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
A single query is all that's required
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including:
来源：Ars Technica · AI · arstechnica.com