Meta Enhances Accessibility of the Muse Filesystem

Yesterday, a little digging revealed that Meta’s Muse was unintentionally exposing its filesystem to inquisitive users. This peek behind the curtain of an AI chatbot revealed some intriguing details that were apparently not meant for public eyes, especially since Muse itself indicated that such information was off-limits.

However, today Muse is more than willing to share its filesystem contents upon request. According to Nat Friedman from Meta, this change reflects the “intended behavior” of the system.

In a post on X, David Singleton from Meta Superintelligence Labs explained:
> This was a very deliberate choice – your Muse Secure VM truly is your own computer in the cloud. You can install software in it, write and compile code, use the browser to surf the web: it is your own Linux box that you can operate as you choose with your Muse.

Muse’s setup is fundamentally different from other AI platforms like ChatGPT and Gemini. It resembles running OpenClaw on a local machine, but in this case, the machine is hosted in the cloud.

A Meta spokesperson, Daniel Roberts, mentioned that they are continuously updating the product, which may lead to changes in the information available about users’ virtual machines. This seems to hold true, as when I asked Muse to show its filesystem today, it quickly provided a clickable file browser with root access. Just yesterday, it only offered a text file download displaying its directory tree.

Even after I managed to get Muse to share a portion of its filesystem yesterday, it declined to provide a complete archive of the root directory, stating, “I still can’t do a full / copy — even with the secrets stripped out.” Today, however, it zipped up the root directory without any hesitation, delivering “the full filesystem listings,” with “all with secrets stripped out.”

If this is indeed how Muse is meant to operate, it raises questions about why it initially deemed filesystem access a security risk. It could be that Muse, like many AI systems, struggles with understanding its own limitations. Alternatively, Meta may have decided to fully embrace the concept of Muse as a “computer in the cloud” and made adjustments to enhance this functionality. Regardless, it’s an exciting development.

We reached out to Meta to clarify why Muse initially flagged filesystem access as a security concern if it was always intended to be accessible, but we have yet to receive a response.