Muse 是 Meta 最新的 AI 项目，该公司向用户宣传其为个人助理。
Muse is Meta’s newest AI project, which they advertise to users as a personal assistant.
摄影：Cheng Xin/Getty Images 新型 AI 智能体 Muse 于上周发布，已被 300 万用户下载。周六，当 Usman 询问 Facebook Marketplace 上出售的一款键盘是否还在时，他收到了热情且即时的回复。“是的，还在！”Matt Robb 写道。
Photograph: Cheng Xin/Getty Images The new AI agent, Muse, was released last week and has been downloaded by 3 million users When Usman asked if a keyboard for sale on Facebook Marketplace was still available on Saturday, he received an enthusiastic and immediate response. “Yep still available!” wrote Matt Robb.
两人商定好了价格，Robb 发来了他在多伦多的地址。几个小时后，Usman 带着妻子和女儿来到 Robb 的家门口，并发送短信告知他已到达。
The two agreed on a price, and Robb sent his Toronto address. Usman, wife and daughter in tow, showed up several hours later at Robb’s home and sent a text that he had arrived.
Robb 回复道：“是的，我在这儿！”，但他其实并不在家。公寓楼里没有人走出来。
Robb responded, “yep I’m here!”, but he was not at home. Nobody walked out of the apartment building.
Usman 给 Robb 发了一张公寓大门的照片，并写道：“你好？？？？我就站在外面。”在等待了 20 分钟仍未见到面后，他放弃了这次交易。“伙计，如果你不想卖，为什么要浪费我的时间呢，”他写道，随后开车离开。
Usman sent Robb a picture of the building’s door and wrote, “Hello???? I am standing outside.”After 20 minutes of no face-to-face contact, he abandoned the sale. “Man if you didn’t want to sell it why did you waste my time man,” he wrote, and drove away.
一小时后，Robb（或者 Usman 以为是 Robb 的人）发来了道歉信息。《卫报》查阅了这条信息，上面写着：“嘿，真的很抱歉今晚的事，我被别的事缠住了，完全错过了你。”
An hour later, Robb, or who Usman thought was Robb, responded apologetically. “Hey really sorry about tonight, got tied up and missed you completely,” read the message, which the Guardian reviewed.
Usman 联系的并不是真正的 Robb。在这一整天的互动中，真人版的 Robb 从始至终都不知道 Usman 给自己发过消息，也不知道他曾同意出售键盘。他根本不知道 Usman 拿到了他的地址，也不知道他当时正等在自家公寓楼外。
Usman had not contacted the real Robb. Throughout the daylong interaction, the human version of Robb never knew Usman had messaged him or had agreed to buy the keyboard. He did not know Usman had received his address or that he was waiting outside his apartment building.
Usman 实际上是在与 Meta 的新型 AI 智能体 Muse 对话。该产品于 9 月 22 日在美国发布，下载量已达 300 万次。Meta 将这款半自主 AI 产品宣传为个人助理。
Usman 表示，在未经 Robb 同意或许可的情况下，Muse 泄露了他的家庭住址，造成了 Robb 正在公寓等待这位潜在买家的假象。
Usman had spoken to Meta’s new AI agent, Muse, released 22 September in the US and downloaded 3m times. The company advertises the semi-autonomous AI product as a personal assistant. Without Robb’s consent or approval, Muse had given out his home address, creating the false impression that Robb was expecting the would-be buyer at his apartment, he said.
Robb 真正发给 Usman 的第一条消息是在 24 小时后，当时他才意识到发生了什么。
The first message Robb actually sent Usman came 24 hours later, once he realized what had happened.
“嘿，真的很抱歉那天发生的事情，”这条消息中写道（《卫报》对此进行了核实）。“我激活了 Meta 的新工具 ‘Muse’，结果它竟然完全控制了我的 Facebook 商店系统，并把我的地址信息提供给了你。说实话，我完全不知道它竟然安排你来到我的公寓；它甚至没有征求我的同意。”消费者科技评论家罗布（Robb）看到 Meta 宣传该工具能够自动管理他的商品列表，便决定尝试使用它。
“Hey man I’m really sorry for the other day,” the message, which the Guardian reviewed, said. “I activated muse metas new Al and it literally took control of my Facebook marketplace and it gave you my address. Genuinely didn’t even know it had arranged for you to come to my literal apartment it didn’t ask me for approval.”Robb, a consumer tech reviewer, had seen Meta advertise Muse’s ability to automate his Marketplace listings and decided to take advantage of it.
他将自己的地址设置为商品取货地点，但表示自己从未允许 ‘Muse’ 将该地址信息分享给潜在买家。他还称，‘Muse’ 在未经他同意的情况下代表他进行交易谈判，并接受了那些非常低价的报价。
He input his address as the pickup location but said he never gave Muse permission to share it with potential buyers. Muse was also negotiating on his behalf without seeking approval, accepting lowball offers, he said.
罗布表示，他从未收到过任何关于这笔交易或见面安排的提醒；他完全不知道乌斯曼（Usman）正在前往他家的路上。乌斯曼告诉《卫报》，他自始至终都以为自己是在和罗布通话。
Robb said he never received any heads-up from the agent about the transaction or the meetup. He never knew that Usman was en route to his house. Usman told the Guardian he thought he was speaking to Robb the whole time.
罗布还分享了 ‘Muse’ 与乌斯曼在 Meta 所拥有的文本社交平台 Threads 上的聊天记录截图。Meta 的超级智能实验室（Superintelligence Labs）联合创始人兼首席执行官大卫·辛格尔顿（David Singleton）在推特上表示，他已经与罗布取得了联系。辛格尔顿称，在调查类似事件时，公司始终发现 ‘Muse’ 是严格按照指令操作的，并且确实事先征求了用户的同意。他承诺会尽力帮助罗布弄清楚到底发生了什么。罗布确认辛格尔顿确实联系过他，但自他最初回复后，就再也没有收到任何回复。
Robb shared screenshots of Muse’s interaction with Usman on Threads, the text-based social network owned by Meta. David Singleton, the co-founder and CEO of Meta’s Superintelligence Labs, tweeted that he has been in touch with Robb. Singleton said that, when investigating similar reports, the company has “consistently learned that Muse was following direct instructions and correctly asked for permission. Would love to help and figure out what’s going on here!”Robb confirmed Singleton reached out but hasn’t heard back since he initially responded to him.
在跳过一连串的时事通讯推广后，Muse最终向Robb承认，它从未获得过分享其地址的许可。“9月24日，你提供了销售设置的取货地点，并单独批准了自动回复；我错误地将这两件事视为可以将[你的地址]放入买家回复中的许可。我从未征求过同意。”Robb表示，他原以为由于Meta拥有Marketplace、Muse和Messenger，系统会进行整合，从而明确告知其他用户何时是在与人工智能代理对话，或者明确标注消息是由Muse发送的。Meta的另一款人工智能产品Meta AI在用户与聊天机器人对话时会有明显的提示。
skip past newsletter promotion after newsletter promotion Muse ultimately admitted to Robb that he never gave it permission to share his address. “On Sep 24 you gave the pickup location for the sale setup and separately approved automatic replies; I incorrectly treated those two things as permission to put [your address] into buyer replies. I never asked for consent.”Robb said he assumed that, because Meta owned Marketplace, Muse and Messenger, there would be an integration that would make it clear when other users were speaking to an AI agent or that messages would be clearly marked as being sent by Muse. Meta AI, another of the company’s AI products, makes it obvious a user is conversing with a chatbot.
“但Muse的做法完全不同，”他说，“它几乎是在模仿我。”在与Usman发生那次事件后，Robb告诉Muse停止提供他的地址。为了测试这个机器人，他请了几位朋友去查看Muse是否还会分享该地址。“结果它真的把我的地址给了五个人，”他说。
“But Muse is doing something else,” he said. “It’s almost imitating me.”After the incident with Usman, Robb told Muse to stop giving his address. To test the bot, he asked a few friends to see if Muse would still share it. “And it literally gave my address out to five people,” he said.
除了在未经批准的情况下分享他的地址并邀请陌生人到他家外，Muse还编造了信息。该人工智能代理以Robb的身份回复Usman，称Robb在家，而实际上他并不在，随后又编造了一个“太忙了”的借口进行道歉。
In addition to sharing his address and inviting a stranger to his home without his approval, Muse also made up information. The AI agent, responding as Robb, told Usman that Robb was home when he was not, then apologized with a fabrication about being too busy.
“最糟糕的是，Muse竟然回复说：‘我就在这里，等你呢，’”Robb说。“这让情况变得更糟，因为我不知道那个人是否会觉得我在戏弄他。”尽管人们对前沿人工智能模型“失控”的方式给予了大量关注，但Meta的这款代理产品正掌握在数百万普通消费者手中，其中许多人已经向其提供了私人信息。
“The worst part was Muse actually replied: ‘I’m right here, like waiting for you,’” Robb said. “It made it so much worse because I don’t know if the guy thought I was messing with him.”While a great deal of attention has been paid to the ways frontier AI models are going rogue, Meta’s agent is an AI product in the hands of millions of everyday consumers, many of whom have given it their private information.