First screen, captured 4 days ago.

Muse exposes users' personal and business secrets when they share conversations

What HN thinks

Meta builds a privacy-first AI assistant; DNS logs politely disagree.

Meta being Meta, unsurprisingly
Many see this as predictable from a company with Zuckerberg's track record, with side arguments over whether all tech companies are equally bad.
Secrets in subdomains is amateur
Putting conversation titles in subdomains leaks them via plaintext DNS and passive DNS logs; a random path behind TLS would have avoided it, though one commenter defended domain isolation as a tradeoff.
Personal agents need self-hosting
Some argue agent platforms are inherently risky and should run locally or with privacy-focused providers, while others question whether personal agents are useful at all.

Consensus: Most agree the URL design was an avoidable, long-known mistake that a company of Meta's size should have caught, and that handing Muse sensitive data is unwise.

Recommended in the comments

Careless People (book): Recommended as an eye-opening account of Meta's culture.
Hermes (tool): A commenter runs it locally to automate chores like grocery restocking cheaply and privately.
noodle ↗ (tool): Offered as a self-hosted alternative to cloud agents like Muse.
OpenClaw (tool): Used by a commenter to run a personal assistant with its own email and phone number for group coordination.

Summarised by Claude from the comment thread 3 days ago.

Points: 367
Comments: 176
Best rank: #24
Posted: 2026-10-20 by gumby
Category: Security

meta-muse meta ai-agents data-exposure passive-dns privacy

All captures:

Full page

Captured 4 days ago. Click for the whole screenshot.

Looks similar

Screenshot of arstechnica.com: With AI chatbots, Big Tech is moving fast and breaking people

With AI chatbots, Big Tech is moving fast and breaking people (arstechnica.com)

34 points by rntn 1 year ago | 33 comments

Screenshot of arstechnica.com: Researchers describe how to tell if ChatGPT is confabulating

Researchers describe how to tell if ChatGPT is confabulating (arstechnica.com)

31 points by glymor 2 years ago | 15 comments

Screenshot of arstechnica.com: Zuckerberg’s AI hires disrupt Meta with swift exits and threats to leave

Zuckerberg’s AI hires disrupt Meta with swift exits and threats to leave (arstechnica.com)

48 points by 1vuio0pswjnm7 1 year ago | 37 comments

Screenshot of arstechnica.com: Moderna and Merck say their mRNA cancer vaccine cut death, recurrence by 42%

Moderna and Merck say their mRNA cancer vaccine cut death, recurrence by 42%(arstechnica.com)

136 points by _Microft 19 hours ago | 25 comments

Ars Technica article reporting Phase 3 results showing Moderna and Merck's personalized mRNA melanoma vaccine with Keytruda cut recurrence or death risk by 42%.

mrna-vaccines cancer-vaccine melanoma moderna