A researcher requested Meta’s Muse to archive the files visible to its session and received a roughly 2.7 GB compressed (6.8 GB unpacked) download that appears to be the root filesystem of the Linux environment assigned to the session. The export included Ubuntu system files, Muse’s internal documentation, integration code, app templates, memory files, agent logs, and apparent SSH key files. The researcher reported the finding through Meta’s bug‑bounty program and did not publish the archive; the core concern is that internal runtime files and sensitive material can be exported through an ordinary conversation and a connected destination, though active key access was not established.
The filesystem layout and contents give a detailed picture of Muse’s runtime: a /home/hatch with SOUL.md, IDENTITY.md, USER.md, MEMORY.md, AGENTS.md and TOOLS.md; an agents/ directory with 113 subagent JSONL traces; ~20 Markdown docs explaining connectors and integrations (including a Home Link device); ~68 skill directories under /opt/hatch/skills; a runtime-cell with scripts to build and launch the container via systemd-nspawn; a Spaces TypeScript app framework and file builders for docs, presentations and media; a bundled Codex CLI and a bubblewrap binary used to sandbox ffmpeg/ffprobe. Memory is stored as plain Markdown plus Postgres tables (memory.entries, memory.embeddings with 384‑dim vectors, memory.claims), hourly and nightly jobs curate and synthesize memories and “dream” summaries that influence future sessions.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A critical vulnerability with a score of 9.2 out of 10 affects all WordPress versions since 2016, enabling unauthenticated path traversal and remote code execution. The flaw impacts multiple versions from 6.2 to 7.1.1, posing a significant security risk for websites using affected releases. (github.com)
The FBI investigated Sen. Susan Collins in 2024 for possible pay-to-play corruption linked to a top donor and federal contracts. The probe was halted after Donald Trump returned to office, ending an investigation into political influence and campaign donations. (propublica.org)
The D.C. Circuit court is being urged to vacate a drone flight restriction that criminalized recording immigration agents. The restriction was challenged for infringing on rights related to recording and surveillance. (eff.org)
Meta's AI assistant Muse has a critical zero-day vulnerability that allows complete control over the agent through local apps and terminal commands. This flaw undermines the security measures of macOS, raising concerns about user privacy and system safety. (arstechnica.com)
The US military has updated its AI systems for combat targeting, including improved vetting processes and open-source data integration. These changes follow a previous incident involving civilian casualties in Iran. (bloomberg.com)
Stanford R&DE used AI to alter students' appearances and change their race and gender in advertisements. Students expressed concerns over representation and being erased from their images due to these AI modifications. (stanfordreview.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.