HN

Comments (70)

• Menu

  lmf4lol
  We are building a Personal AI Assistant platform in Europe. Oh man. It is FREAKING HARD! We have now 20 paying users and it is amazing what those people do lol. You really can't make it up. The complexity of building such a business is something I've really underestimated. Especially if you allow the harness to evolve. For our 20 users, no sandbox is still the same anymore. Everyone customized it, has crons running, built apps or automations. And then jsut to think that Meta Muse went to a million users in literally no-time. I am not surprised at all. On the other hand. Zuck has literally infinite money to spend. You'd expect better than, right?EDIT: Because someone downstream rightfully asked if we look at user's sandboxes: Yes! IF they ask us. Our users aren't engineers and often get stuck and even the LLM can't figure it out. THEN - AND ONLY THEN - we jack into the sandbox and help them.
• Menu

  ryandrake
  I couldn't be true. You're telling me that Meta, of all companies, would be careless with user data and privacy? Totally unbelievable!
• Menu

  JumpCrisscross
  > But a central design decision for constructing URLs has made the links easy to discover. As a result, researchers from security firm Claroc said they were able to enumerate 6,800 links Muse users created for sharing conversations with others.To be clear, did the users intended for these conversations to be shared with someone? Meta just created a guessable capability URL?Or were all Muse users' conversations by default public, just behind an obscure URL?
• Menu

  omoikane
  Lesson here is that the subdomain names can be queried due to passive DNS records, and putting stuff that is not supposed to be guessable in subdomain names is a bad idea.
• hamburglar
  I am baffled by all these people giving muse their personal info. I tried muse out. Didn’t install anything locally and didn’t give it any personal info beyond a fresh meta identity. I just poked at the free vm for a while. There’s no way in hell I’m giving it access to anything sensitive.
• kristopolous
  This is news? Didn't we all just presume that was what was happening? I mean they're a data mining company.
• motbus3
  My honest view is that it is taking too long for them to be made legally responsible for these problems.There is no point on saying "there is no guarantee software" as it is supposed to be "maybe it does not work" and not "it might make your life terrible"
• adishiktensward
  Zuck never beating the allegations
• piterrro
  I dont get why they bother with DNS and subdomains when they could generate a unique url. This would eliminate the possibility of easy reverse dns lookup.
• Menu

  ulfw
  For the life of me I will never understand why people are so eager to use these things
• eviks
  > Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,”> reported the findings through Meta’s bug bounty program on October 8 and also tried reaching people at Meta on LinkedIn, but got no reply either way.Checks out> The ease in discovering share links further justifies asking if Muse is worthy of the access it requires.That's all you could justify?
• giorgiogamba
  There was a feature requirement for this
• crorella
  oops! This is totally unexpected coming from Meta.
• johnnienaked
  Comedy of errors
• anon
  undefined
• postatic
  This is a feature no?
• diegoborgh
  Shocking!
• vektormemory
  If only there was a company that didn't use ads, protected people's privacy, didn't sell their data, and had local data sovereignty?
• viccis
  Muse is the most obviously doomed claw-style bot because you already need to segment those things from ANY personal info, and Meta rolls into the room as the journal that will tell everyone what you write in it and says "trust me"Part of a huge problem with FAANG companies. You can't be Meta and just ratfuck your users for decades and then ask them to trust you, just like you can't be Amazon and turn your storefront into Temu-lite and expect people to want to order products sight unseen with your Echo shit.
• Menu

  Razengan
  I mean, not to victim blame, but anyone willingly using any Facebook product at this point should know what they're signing up for.
• AhmedA-afk
  [flagged]
• ricky_risky
  [flagged]