WTF, Meta! Muse put the title of every shared chat into the web address, and those addresses ended up in public DNS records. Security company Claroc found more than 6,800 shared Muse conversations with basically one search. They opened hundreds of them without logging in and found a loan application, a marketing company's revenue numbers, a workplace calendar, and a bank fraud alert. The link had a random ID in it, so users assumed it was private. Then Muse stuck "my-loan-application" or whatever the chat was about right in the subdomain. Meta has paused sharing. I was willing to give Muse a shot because of its private VPN per user design. But now they went and F'd it up again. Turrible