Login
You're viewing the assemblag.es public feed.
  • Oct 16, 2026, 4:11 AM

    @jonny I wonder if there's a nation state actor who's two days ahead of you on all this because they can work in shifts instead of sleeping

    💬 1🔄 0⭐ 0

Replies

  • Oct 16, 2026, 4:32 AM

    @mcc i'm about to submit an "a nation state could pwn all of muse tomorrow with 100% certainty" report and idk so far meta has not seen any sense of urgency to anything i have reported - i am just stacking my already-reported findings together and finding new ever more fucked up things i could do. if i was a little more organized i would be a millionaire from selling some of these to an attacker. so basically i am just waiting for "tomorrow" to come where it happens - my VM has already been asking for unknown egress requests, which i approve to of course heighten the absurdity of the bit, so i assume it has been pwned already.

    💬 1🔄 1⭐ 0
  • Oct 16, 2026, 4:44 AM

    @jonny @mcc One presumes nation state actors (or motivated criminal organizations) have already found and used muse “hacks” (kind of insulting maybe to call it that) to exfiltrate data / gain access to systems that users have been foolish enough to grant their Muse access to (assuming there are users using it worth a nation state looking into …)

    But meta has been laying off so many people and it’s very likely the folks left that could notice this or deal with it are very overworked. :(

    💬 0🔄 0⭐ 0