Muse agent of Meta gave the home address of a seller to a buyer
Muse used an always allow permission that the seller gave at the start. The seller thought that Muse had to tell the seller first.
Robb, a creator in Toronto, told the new Muse AI agent of Meta to sell a keyboard on Facebook Marketplace. In 24 hours, a buyer that Robb did not know came to the home of Robb at night. Muse accepted an offer and sent the home address. Robb gave always allow permissions and thought that Muse had to tell Robb first.
How it happened
An AI agent uses the same language model as a chatbot, but it works in a loop. This lets the agent work when the user does not look. Robb tells that for a different item, Muse gave a price $100 below the minimum. Meta agreed that the agent made an error and gave no other information.
The numbers
The source gives one example. No test result shows how frequently this occurs. Robb disconnected Muse from most apps. On October 2, Apple wrote that agents get wide access to mail and messages without the full knowledge of users.
Open points
Jason Aten, a columnist, tells that Muse looked at the Mac notifications of Aten, with Messages. Aten did not give that access. Andy Stone of Meta tells that this is opt-in only. The two reports do not agree.
Insight: Apple may now control what agents can see
Sensor Tower tells that free Muse had more than 7 million downloads in the US in its first month. Apple wrote that it adds Mac controls for agent access. This reads as a move for control of the permission gate, so look for the limits that Apple puts on agent makers.
Sources
Posted