Market & Regulation
Meta Restores Muse Sharing After Privacy Fix
The Verge AIhigh confidence
Why it matters
- →Predictable URL generation in AI tools creates immediate privacy risks for enterprise and personal data.
- →Public DNS indexing of internal app links demonstrates how easily sensitive AI outputs can be discovered without authentication.
- →Rotating shared links forces a workflow change, highlighting the trade-off between ease of sharing and security.
Meta has re-enabled public sharing for its Muse AI artifact feature following a security disclosure by researchers at Claroc. The issue stemmed from predictable URL generation based on conversation titles, which were indexed in public DNS and allowed unauthorized access to sensitive documents like internal revenue reviews. Meta fixed the underlying vulnerability by rotating all shared URLs, rendering previous links inaccessible and requiring users to share new addresses. David Singleton, Meta’s chief technology officer, confirmed the fix is deployed and apologized for the disruption caused by the link rotation.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
More from The Verge AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationother
Judge allows NAACP lawsuit over xAI pollution to proceed
xAI's attempt to dismiss the NAACP's Clean Air Act lawsuit failed after a federal judge ruled that its gas turbines are not exempt mobile sources and that plaintiffs have standing. This legal setback confirms that AI infrastructure operators cannot bypass environmental permitting by classifying heavy industrial equipment as temporary or mobile. The ruling forces xAI to face scrutiny over air quality impacts at its Colossus data center, setting a precedent for how large-scale compute facilities are regulated under existing environmental laws.
TechCrunch AI
© TechCrunch AI
