Хэрэглэгчдийн хуваалцсан ярианы холбоосууд хайлтын системд ил харагдаж байгаа нь нууцлалын ноцтой эрсдэл дагуулж байна.
Meta компанийн хиймэл оюун ухаант туслах Muse-ийн хэрэглэгчдийн яриаг хуваалцах функцэд ноцтой сул тал байгааг Claroc компанийн судлаачид илрүүлжээ. Хэрэглэгчид өөрсдийн яриаг бусадтай хуваалцах үед үүсдэг холбоосууд нь хайлтын системд ил харагдах боломжтой байгааг тус компанийн хамтран үүсгэн байгуулагч Асаф Апрозпер аравдугаар сарын 8-нд Meta-д мэдэгдсэн байна.
Энэхүү эмзэг байдал нь холбоосын дэд домэйн хэсэгт ярианы гарчиг хадгалагддаг дизайны шийдлээс үүдэлтэй юм. Ингэснээр пассив DNS (Passive DNS) хайлтын үйлчилгээ ашиглан хэн ч хэрэглэгчийн хувийн ярианы холбоосыг хялбархан олж, үзэх боломжтой болж байна. Судлаачид үүнийг “GhostShares” хэмээн нэрлэж байгаа бөгөөд уг мэдээллийг олоход ердөө нэг удаагийн хайлт хангалттай байгааг онцолжээ.
Meta компани асуудлыг хүлээн авч, тус функцийн ажиллагааг түр хугацаагаар зогсоогоод байна. Тус компани өөрийн бүтээгдэхүүнийг сайжруулах зорилгоор алдаа илрүүлэх хөтөлбөрийг ажиллуулдаг ч, өмнө нь macOS системийн аюулгүй байдлын шинжээч Патрик Уордлын илрүүлсэн “zero-day” эмзэг байдлын мэдээлэлд хангалттай анхаарал хандуулаагүй гэх шүүмжлэлд өртөж байв.
Muse туслах нь хэрэглэгчийн олон төрлийн бүртгэлд хандах эрх шаарддаг тул ийм төрлийн хамгаалалтын цоорхой нь нууцлалын өндөр эрсдэлийг бий болгож байна. Одоогоор Meta компани уг асуудлыг хянаж, холбоосыг хэрхэн илрүүлэх боломжтой байгааг өөрчлөх арга замуудыг судалж байна.
Дэлгэрэнгүйг эх сурвалжаас харах
↓Эх сурвалжийг нээх ↓
“If you had asked us beforehand, we would have guessed that gathering these would take real effort,” the researchers wrote. “It took one query.”
In an emailed statement responding to questions from Ars, Meta said: “We opened the Muse bug bounty program so researchers could raise different scenarios and help us continue improving the product. People have the ability to share specific Muse artifacts, which creates a page that can be accessed by those with the link. However, we’ve paused this functionality while we review this report and consider changes to how these links can be discovered.”
Asaf Aprozper, a cofounder and CTO of Claroc, said he reported the findings through Meta’s bug bounty program on October 8 and also tried reaching people at Meta on LinkedIn but got no reply either way.
The easiest way to discover the URLs is to perform a passive DNS search through one of many available commercial services. Passive DNS records store the historical resolution of domain names to IP addresses, as well as nameserver, and mail-server records over time. Passive DNS systems typically collect DNS responses from sensors positioned at recursive DNS resolvers or other infrastructure. A passive DNS record is generally created when a monitoring system observes a DNS response. In the case here, once the intended party clicks on the share link, the DNS information is recorded in a searchable database.
Claroc researchers were able to discover the Muse share links because all of them use the domain name cf.metaaiusercontent.com. Discovery is further made easy by the decision to add the conversation name to the URL, along with a long string of text. Simplified examples of such links are home-sale-budget-9f21c8a3.cf.metaaiusercontent.com, q3-revenue-review-7b1e42f0.cf.metaaiusercontent.com, and loan-application-draft-a4c9e2.cf.metaaiusercontent.com. It’s this last design decision, putting the conversation title in the subdomain rather than in the URL path, that makes public discovery possible.
“Plenty of AI assistants share by public link,” Claroc said. “What makes Muse’s shares easy to find is the title sitting inside the web address, where public DNS records it for anyone to search. We call these GhostShares: pages that open for people who were never handed the link, and that those people can find on their own.”
Muse quickly catapulted to one of the top spots in Apple’s App Store. The assistant autonomously fills out forms, books appointments, makes purchases, creates documents, and carries out all kinds of other actions. To work as intended, Muse requires access to most of a user’s accounts. Meta has heavily marketed the assistant as a platform that’s worthy of the extraordinary trust it needs to work as intended.
Three weeks after the Muse launch, macOS security expert Patrick Wardle discovered a zero-day vulnerability that allowed any other app installed on the same device to gain complete control of the user’s Muse account. Meta downplayed the severity of the vulnerability on the grounds that exploitation wasn’t possible unless a device was already compromised. The company didn’t acknowledge Wardle’s finding that a simple ClickFix attack was all that was needed to hijack an account. The ease in discovering share links further justifies asking if Muse is worthy of the access it requires.
With Meta’s suspension of the feature, Muse users no longer face this particular threat, at least for now.
This story originally appeared on Ars Technica.
