Meta Reopens Muse Sharing Feature Following Security Vulnerability
The Meta Muse sharing feature, which was temporarily suspended after security researchers reported that shared documents could be easily discovered via DNS, has been reactivated after the issue was resolved.
Meta has re-enabled the Muse sharing feature, which it had suspended after security researchers reported that public links were discoverable, after fixing the infrastructure issue.
Meta has reactivated the Muse sharing feature, which it had temporarily suspended following warnings from security researchers. Claroc researchers had discovered that shared conversation addresses on the Muse platform were named according to conversation titles and written to public DNS records. This situation had allowed sensitive pages, such as a marketing company's internal revenue review or a small business owner's loan application form, to be easily found.
According to Ars Technica, Meta had halted the sharing feature after being notified of the situation. Meta official David Singleton announced in a statement on the X platform that the underlying issue had been resolved and sharing was turned back on again. Singleton stated that the problem was not in chat sharing, but rather in the URLs of shared Muse items such as documents and images.
As part of the update, new URLs have been assigned to all items shared before the bug was fixed. While users visiting old links will encounter a warning asking them to request the new link, Meta emphasized that protecting user data is a priority.
Sources
- theverge.com · Link