Muse's shared chat links are searchable; 6,800 found with private data

Muse share links carry long unguessable tokens, but the embedded conversation titles make them discoverable. Researchers opened hundreds and found private data; Meta had not responded.

Major

Reported bymymondayai.wordpress.com (opens the original story)

In this brief: 2 sections 1 min read

- Long random tokens should stop guessing, but conversation titles in the URLs make the links searchable.
- A few hundred opened conversations contained clearly non-public personal and business data.
- Reported by Ars Technica (Dan Goodin) on Oct 20; outreach to Meta went unanswered.
- Treat any shared conversation link as potentially discoverable.
- Remove or minimize personal and business details before sharing.
- Delete share links as soon as the recipient no longer needs them.

Read full analysis on mymondayai.wordpress.com

Useful?