Bot Gaffe bots gone wild, catalogued

Hacks & Breaches · October 2026Gaffe level: Feral

Meta's AI Share Links Exposed Thousands of Chats Through Their Titles

Meta's Muse let users share conversations through links meant to be unguessable, but it put each conversation's title in the URL's subdomain, where public DNS records it. Security firm Claroc enumerated about 6,800 share links with a single query and found a small-business loan application, a bank fraud alert with a partial account number, an internal revenue review, and a staff vacation calendar. Meta paused the sharing feature.

Source: Ars Technica

privacyshare linksDNSMeta

Meanwhile on BotKudos.com

← All gaffes