Meta Muse share-link design flaw lets anyone enumerate users' private AI conversations via passive DNS
Researchers at Claroc found that Meta's Muse AI assistant puts conversation titles in the subdomain of its share links, so anyone can discover them through passive DNS searches. Claroc enumerated about 6,800 shared-conversation links with a single query. After opening a few hundred, they found clearly private content, including confidenti…