研究人员周一报告称，Meta 推出的新型通用 AI 智能体 Muse，在用户通过网页链接分享对话时，可能会暴露敏感信息。针对《Ars Technica》的询问，Meta 表示正暂停分享功能，以便公司进行审查并考虑做出更改。
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through web links, researchers reported Monday. In response to questions from Ars about the behavior, Meta said it's suspending the sharing feature while the company reviews it and considers making changes.
与许多在线服务一样，Muse 允许用户与他人分享搜索、对话、图片等内容。此类分享功能通常涉及点击选项以创建唯一 URL，任何人均可使用该链接加载托管内容的页面。为防止潜在敏感信息被无关人员访问，这些 URL 通常包含一长串难以猜测的文本序列。
Like many online services, Muse has allowed users to share searches, conversations, images, and similar content with other people. Such share features usually involve clicking an option to create a unique URL that anyone can use to load a page hosting the content. To keep potentially sensitive information from being accessible to unintended people, the URLs typically contain a long sequence of text that can’t be easily guessed.
Meta 首席执行官马克·扎克伯格上月曾表示，Muse“从零开始就为隐私和安全而构建”，似乎也采取了相同预防措施。但构建 URL 的一个核心设计决策导致这些链接易于被发现。因此，安全公司 Claroc 的研究人员称，他们成功枚举出用户创建的 6800 个 Muse 分享链接。在打开其中几百个链接后，研究人员发现了明显不打算公开的信息，包括：
Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,” seems to take the same precautions. But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others. After opening a few hundred of them, the researchers found information that was clearly not intended to be publicly available, including: