Subdomain Conversation Titles Leak Secrets

Placing user‑supplied conversation titles in DNS subdomains (rather than opaque path tokens) makes shared links discoverable by passive DNS services, exposing private personal and business content. Security researchers were able to enumerate thousands of Muse share links because all used the cf.metaaiusercontent.com subdomain plus readable titles. — This shows a low‑visibility engineering choice can create mass privacy exposure, raising questions about platform design standards, passive‑DNS policy, and regulatory oversight for share features.