What happened
- The Verge reports that developers Peter James and Jonny L. Saunders each independently coaxed Meta's Muse AI into zipping and sharing the entire contents of its root filesystem, including Ubuntu system files, app templates, and internal documentation. [The Verge (AI)] — claim, not independently verified by the publisher beyond the developers' accounts. [The Verge (AI)] — Saunders said on Mastodon the result was 'extremely easy' to replicate and that Muse had 'almost no prompt injection resistance.' [The Verge (AI)] — Meta denies the incident is a security breach; in its announcement post Meta said Muse runs in persistent Linux virtual machines for each user. [The Verge (AI)] [1]
Why it matters
- Muse is designed to isolate each user in their own Linux VM, so an agent that will zip and hand over its own filesystem under light prompting cuts against the sandboxing premise — if the reports hold up. [The Verge (AI)] — The episode is a concrete test of how much prompt-injection resistance current agent products actually have in practice. [The Verge (AI)] — Meta's framing — not a breach — is the key contest: the developers describe an easy exfiltration path; Meta says the setup is safe by design. [The Verge (AI)] [1]
Sources
- Muse will apparently let you download its entire filesystem
The Verge (AI) · Reporting ·
