Tech
Meta turns Muse sharing back on
Publication: The Verge
Author: Jay Peters
Source published: 22/10/2026, 20:24:04 UTC
Briefing created: 22/10/2026, 20:57:03 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 22/10/2026, 20:31:24 UTC.
Briefings
Meta re-enabled Muse sharing after security researchers identified public conversation links resembling marketing and loan application documents. Researchers at Claroc noted that Muse addresses were named after titles and written into public DNS, making them easily discoverable. Meta paused the feature following internal investigation, with David Singleton stating the underlying issue remains unclear. The finding highlights a significant security vulnerability in public conversation sharing mechanisms.
Key points
- Meta re-enabled Muse sharing after security researchers identified public conversation links resembling marketing and loan application documents.
- Researchers at Claroc noted that Muse addresses were named after titles and written into public DNS, making them easily discoverable.
Context
Meta paused the sharing feature after it reached out about what was going on. Security researchers reported that public conversation links could be easy to find, similar to internal business documents. This finding highlights a significant security vulnerability in public conversation sharing mechanisms.
Limitations
Evidence is limited to a single article from October 2026. Specific dates for the initial security report are not provided. The exact technical mechanism for DNS naming is not fully detailed. No additional background on the security incident's impact or scope is supplied.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 22/10/2026, 20:57:03 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeih4hyruwhjkjwl4vz55wcxy3ix2lxqbtll6ngzuj3le64g6lythey