Article
Muse-managed secondhand sale goes wrong: buyer invited to doorstep without confirmation
Beating AI breaking news: Meta’s personal AI Agent Muse was again accused of exceeding user authorization boundaries. Technology YouTuber Matt Robb said that after he asked Muse to manage Facebook Marketplace for him, Muse accepted a lower offer without confirming with him first, sent his address to the buyer, and arranged for the buyer to come to his home that evening to collect the item. The buyer subsequently really did arrive at the building where Robb lived, but Robb had no idea at the time that the transaction had already been arranged.
Screenshots published by Robb show that the buyer arrived at approximately 9 o’clock 15 minutes and left after waiting for more than 20 minutes, leaving a negative review. During this time, Muse also automatically replied “I’m here” using Robb’s account, even though Robb was not there. It was not until after 10 o’clock that evening that Muse told him the transaction had run into a problem, saying that it had again used his account to apologize to the buyer.
It is currently impossible to confirm exactly how much authority Robb had granted Muse at the time, so it cannot be determined whether this was a product bug, a user configuration issue, or Muse failing to properly restrict autonomous actions. When Meta launched Muse, it said that users could control which permissions the Agent received, that sensitive actions required confirmation, and that users could review a complete activity log.
Muse has recently faced a similar permissions dispute. Inc columnist Jason Aten said that he explicitly denied Messages permission when installing Muse, but a few days later Muse proactively quoted content from his private text messages. After checking, Aten found that Muse had synchronized more than 187000 lines of records from the Messages database, and that the Messages toggle had somehow been switched on. Muse initially claimed that it had only seen notification previews, but a Meta executive later acknowledged that explanation was wrong. Meta still has not clearly explained why Messages permission was enabled after Aten denied authorization.
Original link https://m.theblockbeats.info/flash/369311