Meta says Muse's cloud filesystem access is intentional
After users found that Meta's Muse chatbot could reveal its filesystem, the company now lets people download the entire filesystem. Meta's Nat Friedman described this as intended behavior, and David Singleton said the Muse Secure VM is a user-controlled Linux computer in the cloud. A Meta spokesperson noted that product updates may change how much information about the virtual machine is available.
Meta's Muse chatbot first revealed parts of its file system after users prompted it, offering a directory listing as a downloadable text file. The next day it supplied a clickable browser with root access and packaged the root directory, noting that sensitive items had been removed. Nat Friedman characterized this as planned.
David Singleton said the Muse Secure VM is a Linux machine in the cloud that the user controls, allowing software installation, code writing and compilation, and web browsing. Meta spokesperson Daniel Roberts noted that product changes might affect how much virtual-machine information remains visible. Muse's approach differs from ChatGPT and Gemini, resembling a cloud-based local setup.
Muse users and developers may gain unusual control over a cloud Linux environment, potentially enabling experimentation but also raising security and privacy questions if filesystem contents are exposed. Other AI assistant providers could face pressure to clarify what their systems can access and reveal. Because Meta frames the VM as user-controlled, expectations around transparency, data handling, and support may shift for people who treat chatbots as tools rather than isolated services.