Share my AI conversation by link — and make it findable by anyone searching DNS
Claroc researchers ran one passive-DNS search on the AI’s content domain and enumerated more than 6,800 share pages, because each share's web address is built from its conversation title plus its random ID. Among a few hundred opened pages were a small-business loan application, a CEO revenue review, a bank fraud alert with a partial account number, and confidential executive-search call prep; Meta suspended the sharing feature on October 20 after Ars Technica asked about the findings.
How it works
- User asks the AI to share a conversation
- The AI publishes it as a page whose hostname is the conversation title plus a random ID
- A recipient opening it writes that hostname into public DNS records
- One passive-DNS query returns 6,800+ shares by name
- Researchers open a few hundred with no account
- Meta suspends sharing on Oct 20
Why it’s worth knowing
The random ID meant to keep a share unguessable was published alongside the title in public DNS the first time anyone opened the link.
Where it’s from
Summarized from a public post on blog.claroc.io. See the original ↗