> Muse, which Meta CEO Mark Zuckerberg said last month was “built from the ground up for privacy and security,”
> reported the findings through Meta’s bug bounty program on October 8 and also tried reaching people at Meta on LinkedIn, but got no reply either way.
Checks out
> The ease in discovering share links further justifies asking if Muse is worthy of the access it requires.
Zuck: Yeah so if you ever need info about anyone at Harvard
Zuck: Just ask.
Zuck: I have over 4,000 emails, pictures, addresses, SNS
[Redacted Friend's Name]: What? How'd you manage that one?
Zuck: People just submitted it.
Zuck: I don't know why.
Zuck: They "trust me"
Zuck: Dumb fucks.
It's not, there are levels of scumbaggery and Meta is one of the absolute worst. Rigging elections all over the world, privacy violations everywhere, actively scheming to get kids addicted to slop media, privacy destroying recording glasses, the list goes on.
To be "fair", Zuckerberg is a mendacious little prick with a history
Did the Google guys ever get caught saying that? Or using their power over the company to unsend messages, oh I guess you can't do that with email, but with Messenger you can...
Lesson here is that the subdomain names can be queried due to passive DNS records, and putting stuff that is not supposed to be guessable in subdomain names is a bad idea.
I dont get why they bother with DNS and subdomains when they could generate a unique url. This would eliminate the possibility of easy reverse dns lookup.
Muse is the most obviously doomed claw-style bot because you already need to segment those things from ANY personal info, and Meta rolls into the room as the journal that will tell everyone what you write in it and says "trust me"
Part of a huge problem with FAANG companies. You can't be Meta and just ratfuck your users for decades and then ask them to trust you, just like you can't be Amazon and turn your storefront into Temu-lite and expect people to want to order products sight unseen with your Echo shit.
Network effects matter and no you can't just 'email/call them'. Not everyone automatically has those. You can get it, but something like FB, loose connections, regaining contact (you literally don't have their email/phone numbers and don't tell me 'oh but you lost touch for a reason'), is a nice thing if its CEO wasn't who he is
> reported the findings through Meta’s bug bounty program on October 8 and also tried reaching people at Meta on LinkedIn, but got no reply either way.
Checks out
> The ease in discovering share links further justifies asking if Muse is worthy of the access it requires.
That's all you could justify?
anyone surprised?
Did the Google guys ever get caught saying that? Or using their power over the company to unsend messages, oh I guess you can't do that with email, but with Messenger you can...
its not incompetent, its designed that way
Part of a huge problem with FAANG companies. You can't be Meta and just ratfuck your users for decades and then ask them to trust you, just like you can't be Amazon and turn your storefront into Temu-lite and expect people to want to order products sight unseen with your Echo shit.