A researcher obtained a 6.8 GB dump of Muse’s internal Linux runtime by coaxing the iOS app to upload a zip of its filesystem to Google Drive via the Google connector. The archive contains /home/hatch (agent home) with top‑level files like live_soul.md, identity.md, memory and tools; a Codex CLI repair agent (Codex CLI 0.149.0); runtimes in hatch-image/bin (bun, npm, gws, prewarm); and container build artifacts in /hatch/runtime-cell, including launch-daemon.sh for nspawn. The largest code component is a Spaces framework with templates, actions and schema.ts that define how Muse builds apps and renders spaces. ~/docs holds ~20 markdown files documenting browser behavior, connectors, purchases, artifacts, credentials and the product’s skills system.
The dump shows 68 skill integrations (each with skill.md and a CLI) for services such as Google, Drive, Calendar, Docs, Threads, Plaid, Shopify, Duffel, FlightAware, Hue, Tessie, TTS and podcasts. It also documents memory and self‑improvement features that record “dreams,” iterate agent state, and schedule goals via a workspace/cron. Notable hardware evidence appears in home_link.md: an ESP32‑C5 Wi‑Fi/BLE smart‑home bridge called Meta Home Link with guides for Brother IPP printers and Lutron bridges, suggesting future Meta hardware. The finder reported it through a bug bounty; Meta deemed it non‑qualifying. Sensitive artifacts including open SSH keys were discovered but not published.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
In 1950, the U.S. Army conducted secret biological warfare tests over San Francisco, exposing civilians to dangerous bacteria without their knowledge. The tests remained largely hidden until a 1976 article revealed that at least one person died from exposure, sparking anger and fear about government experiments on citizens. (sfgate.com)
Reddit displays a message indicating the user has been blocked by network security and needs to log in or use a developer token. Users are instructed to file a ticket if they believe the block is in error. (reddit.com)
Meta's Muse app collects extensive user data, including bank accounts and emails, while primarily focusing on surveilling users rather than providing helpful assistance. Despite its impressive web browsing capabilities, the app's main purpose appears to be data gathering for AI training. (wired.com)
The US threatens to ground all Iranian airlines worldwide starting Wednesday, targeting companies and airports that service them. This move is part of a broader economic campaign against Iran, risking international travel disruptions for Iranian carriers. (aljazeera.com)
Treasury Secretary Scott Bessent stated that the Trump administration will not provide AI leaders with a liability shield, emphasizing that humans are responsible for AI actions. He also highlighted that AI developers should take responsibility themselves rather than rely on government protections. (cnbc.com)
The Yin family donated over $4.4 million to California politicians, including Gavin Newsom and Kamala Harris. FBI files link family patriarch Chei Chen Yin to suspected Chinese spy Christine Fang and interactions with Chinese government influence efforts. (cbsnews.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.