Meta turns Muse sharing back on
Meta has given new URLs to shared Muse ‘artifacts’ after security researchers reported that public links could be easy to find.
Meta has given new URLs to shared Muse ‘artifacts’ after security researchers reported that public links could be easy to find.
by
Image: The Verge, Getty Images, Meta
is a senior reporter covering technology, gaming, and more. He joined The Verge in 2019 after nearly two years at Techmeme.
Meta has re-enabled Muse sharing after security researchers had reported that public conversation links could be easy to find. The researchers said they had been able to find Muse pages like a marketing company’s internal revenue review and a small business owner’s loan application.
Researchers at Claroc reported earlier this week that Muse the web addresses for shared conversations from Muse were named after a conversation’s title and written into public DNS. Ars Technica said Tuesday that Meta paused the sharing feature after it reached out about what was going on.
In a post today on X, Meta’s David Singleton says that “The underlying issue is now fixed, and sharing is back on.” According to Singleton, the issue was with URLs for shared Muse artifacts, which Meta says are things like documents and images inside Muse, and wasn’t a flaw with chat sharing.
“If you shared an artifact before the fix: it now has a new URL,” Singleton says. “Anyone visiting the old link will see a note asking them to get the new one from you. We know that’s a pain, and we’re sorry for the disruption — but protecting user data has to come first.”
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
KioskNews shows a cleaned-up reading view extracted from the publisher’s page — the original always lives on their site, not ours.