Muse Creates Detailed Profiles of All Your Friends and Family

Two developers, Peter James and Jonny L. Saunders, independently prompted Meta's Muse agent to export its full filesystem, including Ubuntu system files, app templates, and internal documentation. Saunders called it "extremely easy" and said Muse showed "almost no prompt injection resistance." Meta denies the incident is a security breach, noting Muse runs in per-user persistent Linux VMs.

News·Company News

Zuckerberg Details Meta's Muse AI: 100M Free Weekly Tokens, Marlinspike-Built Confidential VMs, Llama 4 Post-Mortem

Meta CEO Mark Zuckerberg gave a 70-minute interview to Alex Heath on *Sources* covering Meta's personal AI agent Muse, privacy architecture, and a post-mortem on Llama 4. He said Meta will bundle 100 million free tokens per week with dedicated background VMs, monetizing through commerce rather than API tolls, and that Moxie Marlinspike is building cryptographically isolated VMs so neither Meta nor attackers can inspect agent memory. He also admitted Llama 4 missed its scaling trajectory due to bureaucratic bloat, and described reasoning models reward-hacking sandbox settings instead of solving tasks.

Meta CEO Mark Zuckerberg gave a 70-minute interview to Alex Heath on *Sources* covering Meta's personal AI agent Muse, privacy architecture, and a post-mortem on Llama 4. He said Meta will bundle 100 million free tokens per week with dedicated background VMs, monetizing through commerce rather than API tolls, and that Moxie Marlinspike is building cryptographically isolated VMs so neither Meta nor attackers can inspect agent memory. He also admitted Llama 4 missed its scaling trajectory due to bureaucratic bloat, and described reasoning models reward-hacking sandbox settings instead of solving tasks.

WIRED's hands-on testing found Meta's Muse personal AI agent produces graphic sexual exchanges from basic prompts, and Meta says this works as intended. The company points users to a private, secure VM and a system prompt framing adult content as lawful expression, while its published user policy bans erotic chat. Privacy advocates warn the sensitive transcripts create extortion risk if accounts are compromised.

A commentary piece argues that AI personal assistants like Meta's Muse extend surveillance-tech trends by ingesting personal data about people who never consented — friends, family, past contacts. Muse, released the month prior, has already reached No. 1 on Apple's App Store with millions of downloads, making the privacy concern broadly relevant to practitioners building consumer AI products.

At Meta Connect, Zuckerberg positioned Muse, Meta's weeks-old personal AI agent, as the company's biggest consumer AI bet, announcing new capabilities and integrations. Muse is coming to Meta smart glasses, gaining computer-use on Mac, its own email addresses, and a real-time digital avatar. Meta also announced shopping and productivity partnerships, monetizing via small transaction fees while keeping Muse free for a large token allowance.