Reported by 2 outlets
The story so far
AI summary of the reporting below · Updated · How we work
Meta has re-enabled the sharing feature for its Muse platform after temporarily pausing it earlier in the week. The shutdown followed warnings from security researchers who discovered that shared conversation links could be easily located and accessed online. [1]
According to researchers at Claroc, Muse formatted web addresses for shared discussions using the conversation's descriptive title alongside a random identifier. Because these hostnames were written into publicly searchable DNS records, researchers were able to reconstruct the links and view sensitive user materials, including a marketing company's internal revenue review and a loan application from a small business owner. [1][2]
Meta originally paused the sharing tool on Tuesday after inquiries from Ars Technica. Meta executive David Singleton stated on X that the underlying issue had been addressed, clearing the way for the feature to return. [1]
Each shared conversation had a hostname containing a descriptive title and a random identifier. Both could appear in searchable DNS records, giving researchers the information they needed to reconstruct the link and open the page.
via TechSpot
Meta has re-enabled Muse sharing after security researchers had reported that public conversation links could be easy to find. The researchers said they had been able to find Muse pages like a marketing company's internal revenue review and a small business owner's loan application. Researchers at Claroc reported earlier this week that Muse the web…
via The Verge