Something’s off.Security researchers report that Meta Muse’s conversation-sharing links could be found by people who were never given them. The reported issue is not simply that a link was public: the conversation title was allegedly placed in the link’s subdomain, where passive DNS records could make it searchable.
According to the report, the researchers enumerated 6,800 share links and found examples containing personal and business information after opening some of them. Meta reportedly paused the sharing function while it reviews the report and considers changes to how the links can be discovered.
The strange reversal is that a sharing link meant to be hard to guess may have advertised its own subject in a public DNS trail.
UNVERIFIED
Feed metadata identifies a report, not independently verified underlying facts.
This report has not been independently verified.
