2026-10-21 / Signal #2
Meta’s Muse shared chats became public DNS listings of your secrets
“You named the chat “loan-application-draft.” The internet now has a listing for it.”
The Story
Security firm Claroc found 6,800+ Muse share links in public passive DNS because Meta built each URL from the conversation title plus a random ID. Opening a few hundred revealed loan applications, a CEO revenue review, a bank-fraud alert with a partial account number, a workplace vacation calendar, and prep notes for a confidential call with a frontier AI lab. Meta paused the sharing feature.
Why It Matters
Your private AI conversation title becomes a searchable public domain name. Internet culture, identity, and the quiet horror of “share this chat” actually publishing it to the phone book of the web.
Evidence
Claroc research + Ars Technica / The Verge (Oct 20). Primary URL: https://www.theverge.com/tech/1014627/meta-muse-ai-sharing-ai-chats
Sources
Daily scan: 2026-10-21