Meta told Ars Technica it had paused Muse’s sharing functionality while reviewing a report about discoverable conversation links. The October 20 story describes a privacy problem with shared artifacts, rather than evidence that every private Muse conversation was exposed.
What the researchers reported
Researchers at Claroc said they identified 6,800 links that users had created to share conversations. After examining a subset, they reported finding personal and business information that appeared intended for a limited audience.
The important distinction is between a link that opens for anyone who receives it and one that outsiders can discover independently. A hard-to-guess address alone does not establish that shared material is accessible only to the intended recipient.
What Meta said it changed
In its response to Ars, Meta said users could share specific artifacts through link-accessible pages, but that it had paused that functionality while considering changes to how the links could be discovered. This is the company’s response as reported in the story, not an independent audit of every existing link or later product version.
The account concerns the sharing design. It should not be expanded into a claim that unrelated connected accounts or all unshared conversations were publicly available through the same mechanism.
The practical question for shared AI work
Franklin’s interpretation is that users need to know the access model before sharing an artifact containing client, financial or workplace information. Ask whether access requires a named recipient’s login, whether the link can be revoked and what remains visible after revocation.
For teams, a useful review would inventory shared artifacts and their intended audiences instead of assuming that an ordinary-looking sharing button creates a private workspace. Where a service has suspended a feature, check the provider’s current guidance before relying on earlier sharing behaviour.
Read Ars Technica’s report for the researchers’ findings and Meta’s response. This summary does not reproduce sensitive shared records or instructions for finding them.