Meta Rushed To Fix Muse 'VM Escape' Vulnerability Soon Before Launch (404media.co) 14
An anonymous reader quotes a report from 404 Media: In the immediate weeks before Muse's launch, Meta engineers found several security vulnerabilities in the company's viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse's intended environment and access Meta's own sensitive databases and services, 404 Media has learned. The issues were so severe that they reached Mark Zuckerberg and staff worked overtime to fix them. These specific vulnerabilities were discovered before the launch of the product but required a multi-team "mad dash" to fix "a sudden spike in reported KVM escapes," according to an internal post by Meta executives to its core infrastructure team seen by 404 Media. In order for Muse to work, a user gives the AI agent access to various important services and accounts that they own. On Meta's end, each individual Muse instance runs on a kernel-based virtual machine, which connects to, but is supposed to be isolated from, Meta's own critical infrastructure. A "KVM escape," then, is when, through a security vulnerability, a Muse instance is able to escape from that virtual machine and interact with the system that runs it, or with other users' virtual machines.
According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker -- that is, a normal Muse user -- to access data in sensitive internal Meta databases. At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July. 4 Several of the vulnerabilities were in the underlying Linux virtualization software that Meta uses for Muse. The security issue was considered serious enough that it was raised to Mark Zuckerberg, and several different security teams worked nights and weekends in the leadup to launch to fix the issues. [...] The Meta source said they felt security teams were asked to push hot fixes to these bugs as quickly as possible and in a way that wouldn't delay Muse's launch, leading to what they described as "half-baked protections being rushed out to enable the launch. Many senior engineers believe it's inevitable we're going to have a massive data breach as a result of Hatch." Muse is called "Hatch" internally and in Meta's codebase.
According to a Meta source, as well as internal security documentation and internal posts viewed by 404 Media, at least one of the vulnerabilities could have allowed an outside attacker -- that is, a normal Muse user -- to access data in sensitive internal Meta databases. At least one of the vulnerabilities was related to an exploit found in Linux kernel-based virtual machine code in July. 4 Several of the vulnerabilities were in the underlying Linux virtualization software that Meta uses for Muse. The security issue was considered serious enough that it was raised to Mark Zuckerberg, and several different security teams worked nights and weekends in the leadup to launch to fix the issues. [...] The Meta source said they felt security teams were asked to push hot fixes to these bugs as quickly as possible and in a way that wouldn't delay Muse's launch, leading to what they described as "half-baked protections being rushed out to enable the launch. Many senior engineers believe it's inevitable we're going to have a massive data breach as a result of Hatch." Muse is called "Hatch" internally and in Meta's codebase.
AI Argression is Not A Vulnerability (Score:2)
Re: (Score:2)
AI is doing exactly what it was designed to do: gather money and information at any cost.
that's cool, but wtf does that have to do with this post? did you just read the word "AI" and jump to the comments to share your deep wisdom?
"Hatch" (Score:2)
An appropriate name. Like an infestation of lice.
Muse is called "Hatch" internally and in Meta's codebase.
Re: (Score:2)
Re: (Score:2)
That's a new one on me. Is that some sort of regional slang? Where does the word "hatch" have something to do with lice?
Err... definitely not "regional slang." Literally the dictionary definition of the word "hatch" i.e. "to emerge from an egg."
Re: (Score:2)
Re: (Score:2)
Is... English not your first language? I ask because you appear to be way overthinking this.
The metaphor was perfectly clear to me when I read it.
Unsurprising (Score:3)
Say Meta-mu-cil 3 times as fast (Score:2)
And tell me it does not sond like Meta Muse AI
Then, there is an AI specialized on Law, is called Harvey, Like Harvey Dent the district attorney - Two face, from Batman
Who is naming these things?
Re: (Score:2)
they shoulda listened (Score:2)
quote from Theo de Raadt regarding virtualization (Score:2)
"You are absolutely deluded, if not stupid, if you think that a worldwide collection of software engineers who can't write operating systems or applications without security holes, can then turn around and suddenly write virtualization layers without security holes."
Didn't see that coming! (Score:2)
It's almost like they've got nearly 400,000 CVEs from which to derive new attacks, or re-hash old ones from.