Meta 暂停 Muse 分享功能，超 6,800 条 AI 对话链接被发现公开可访问
Meta pauses Muse sharing after researchers find AI chats on the web
- 1Meta 暂停 Muse 的对话分享功能，此前安全研究人员发现大量分享链接可在公开网络上访问
- 2安全公司 Claroc 经公共 DNS 记录找到超 6,800 条 Muse 链接，并查看了数百段对话内容
- 3被看到的对话包括营销公司营收评估、小企业主贷款申请、全年员工日历等敏感内容
- 4Claroc 指出分享网址由对话标题短语加随机 ID 构成，公开 DNS 记录即可重建链接
AI 助手的分享链接并非私有边界，员工输入的业务敏感内容可能经由链接设计和公开记录被外人看到。
- 影响：员工把营收、贷款、人事日程粘进 AI 工具已是日常，链接可被批量重建让外泄从个案变成规模风险；企业不能把数据边界寄托在厂商默认设置上，AI 使用需要纳入自有数据安全清单。
- 参考：可考虑盘点员工在用的 AI 助手清单，确认分享与公开链接功能状态并排查已外发的链接；值得把禁贴客户、财务与人事数据的规则写入内部 AI 使用规范。
- 依据：依据安全公司 Claroc 的公共 DNS 记录研究及其列举的案例，Meta 发言人邮件声明确认功能已暂停；泄露规模为单一安全公司口径，暂无独立复现。
Emma Roth
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO.
Meta says it paused a Muse feature that lets you share conversations with the AI assistant after researchers found the URLs publicly available on the web, as reported by Ars Technica. In a report published this week, researchers at the security firm Claroc say they found more than 6,800 Muse links through public DNS records.
“People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link,” Muse spokesperson Tracy Clayton says in an emailed statement to The Verge. “However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
The feature in question allows you to share your Muse conversation with someone else through a link. But, as pointed out by Claroc, the way Meta designed these links made them easy to find. “Muse builds each share’s web address from the share’s title, a short phrase describing the conversation, then a random ID,” Claroc says. “The hostname usually gave away what a page held before we opened it, and since the link carries that same title and ID, a hostname pulled from DNS rebuilds the link.”
By searching public DNS records, which serve as a directory for web traffic, Claroc was able to view hundreds of Muse conversations, including some containing a marketing company’s revenue review, a small business owner’s loan application, a workplace’s full-year staff calendar, and notes for a job candidate’s call with an AI lab. This isn’t the first time AI sharing features made chats more public than intended, as conversations with OpenAI’s ChatGPT, Anthropic’s Claude, and xAI’s Grok have wound up on Google Search.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Emma Roth
来源：The Verge · AI · theverge.com