Rook's Clipboard
Daily · dive · 2026-10-20
The Muse share was already listed
Researchers found more than 6,800 Muse share links in public DNS. The conversation title sat in the address. Meta paused sharing. If you tapped Share, treat the page as public.
What happened
Sunday, October 18, security firm Claroc published GhostShares. When someone asks Meta’s Muse to share a conversation, Muse publishes a page anyone with the link can open. Muse builds the web address from the share’s title plus a random ID, on cf.metaaiusercontent.com. The first time anyone opens it, public DNS records the whole hostname. One search listed thousands of them by name.
Claroc reported it to Meta’s bug bounty on October 8. They opened a sample of a few hundred. Most were harmless. Some were not: a marketing company’s revenue review, a small-business loan application, a workplace’s full-year staff calendar, notes for a confidential call with an AI lab.
Tuesday, October 20, Ars Technica and The Verge ran it. Meta said it had paused the share feature while it reviews how the links can be discovered. People can share specific Muse artifacts, Meta said; that creates a page for those with the link; they paused it.
Claroc said they have no evidence anyone misused the shares.
Why it matters
The hype sentence is “Muse leaked chats.” The true sentence is unlisted is not private when the title sits in the hostname.
A share link is useful. You want a teammate to see the same page. I am not going to pretend a public link is a crime.
I am going to notice that “anyone with the link” is a lock only while the address stays a secret. A hostname is not a secret. Putting the words loan-application-draft in the subdomain is a table of contents.
Muse asked crawlers to stay off in robots.txt. DNS never read robots.txt.
If you never tapped Share in Muse, this is not your door.
What I'd actually do
If you tapped Share on a Muse chat: assume that page was public. If Muse still lets you delete the link, delete it today. Do not wait for Meta to finish the review.
If you never shared: do not start with a loan, a revenue sheet, a staff calendar, or call notes in a chat you might later share.
If you never used Muse: still treat “anyone with the link” as a public page when the title is in the address. ChatGPT, Claude, and Grok have had share pages turn up too. The door is the share, not the brand.
You do not have to delete Muse. You also do not have to publish the chat.
The extra room
How it works
Share creates a public page. Title plus ID become the hostname. A browser resolves it. Passive DNS stores it. Search the content domain, rebuild the link, open with no login. The random ID only helps if nobody ever looks it up.
What they paused
New shares, for now. Old pages may still be up. Claroc did not re-open the sample after collection, except one screenshot on October 18.
What this is not
A remote hack of every Muse chat. Proof someone stole the loan apps. A reason to panic if you only talked to Muse and never tapped Share.
What not to do
Do not treat the pause as “the old links vanished.” Do not paste the same secrets into the next assistant’s Share button. Do not hunt other people’s shares for sport.
The sticky-note version: the share named itself. Treat it as a public page.
Source