2026-09-25 12:54 UTC
@hrbrmstr@mastodon.social No we have, but there's no reason to let this garbage off the hook either. Especially when, in Meta's case, it's materially worse than other offerings in terms of basic protections against prompt injection. That's really concerning for a user-facing application in particular.
Replies (1)
-
@tehfishman@ioc.exchange 2026-09-25 13:15
@mttaggart@infosec.exchange @hrbrmstr@mastodon.social I also don't think these are truly comparable issues. Network security vendors have a fig leaf in the form of "don't expose the admin console to untrusted networks". Meta is explicitly stating that Muse is safe, while also stating that you should connect it to things that an attacker can control. Network security vendor products are meant to be operated by professionals, while Muse is meant to be used by _normal people_