Remix.run Logo
▲ pmuse 5 hours ago

I don't use Meta much, but was curious to test this out... went to sign into my Meta account (Quest only) from the Muse Code site https://dev.meta.ai/products/muse-code and had other people's profiles listed in my login auth -- looks like developers / people I have no relation to.

Looks like Meta may be exposing your profile and email to other people right now. Accounts settings are inaccessible to me to deactivate my account. Getting spammed with login code requests that I'm not generating.

Anyway, be wary.

▲pmuse 4 hours ago | parent | next [-]

Here is a screenshot of what I'm seeing: https://imgur.com/ciuNwCG

I don't know any of these people, it seems to be rotating through different accounts listed here.

Enough of a reminder to me that Meta is a sprawling surveillance apparatus (now increasingly vibe coded) that has always had a lax attitude toward people's privacy and data. Won't be touching this product based on this experience.

▲infinita740 2 hours ago | parent | next [-]

Could it be because you are behind carrier grade NAT and these people share a common IP with you?

I imagine meta wants to make it easy to connect to "your" account in the same house if you have multiple devices.

▲ 2 hours ago | parent [-]
[deleted]
▲TomGarden 3 hours ago | parent | prev | next [-]

Oh wow, strange.

I think it's invasive enough that they expose your usage of muse to your instagram mutuals without consent. Parts of my circle are very anti-AI and I would not want them to see me mentioned in a 'x, x and x are already on muse' ad on instagram. This example of yours is mind-boggling in an entirely different way

▲handfuloflight 3 hours ago | parent | prev [-]

Could your account be hacked?

▲pmuse 3 hours ago | parent [-]

I don’t know how? I don’t have much of a Meta account to speak of, only the one tied to my Quest and that is 2FA to an Authenticator app.

Don’t know how it would cause Meta’s auth to show me other peoples accounts. I looked up some of the people and they seem to be other devs. It obfuscates email addresses but most are in a format that’s not hard to figure out [name] @ [name domain.com]

Just more Meta sloppiness from what I can tell.

▲ma2046 3 hours ago | parent | prev [-]

this is a typical meta/facebook/instagram sign-up and log-in UI from the web.

and since dev.meta.ai supports meta account sign-up and log-in for individual users, you'd see this. As for the other accounts, has anyone else used this same browser or laptop before (e.g. shared device), so it must have cached previous sessions or accounts used from the same device.

try to clear the browser cache and session cookies. and it should be gone.

▲pmuse 2 hours ago | parent | next [-]

UPDATE:

I've tried selectively enabling and disabling Safari extensions and it seems to be related to the Wipr 2 content blocker.

Removing that. Caution to anyone else who uses it.

Apologies to Meta.

▲demibabs an hour ago | parent | next [-]

I’m confused as to how a content blocker could cause this. Could someone more knowledgeable than me elaborate?

▲schleck8 an hour ago | parent | prev | next [-]

That does not sound plausible at all, wipr is an adblocker. No adblocker should be causing this. If it's spoofing your JS fingerprint and Meta uses that for suggesting accounts, wow would that be ridiculous.

▲pmuse 38 minutes ago | parent | next [-]

Wasn't something I expected -- seems to be related to having Wipr Extra enabled. Emailed the dev about it and will share if I hear anything back. For now I have it uninstalled and have not experienced this since. Recorded a video of enabling Wipr Extra and the auth page refreshing to show three random people, might be a pain to redact it but I can try to if people really don't believe me.

▲gcr 23 minutes ago | parent | prev [-]

My guess (pure speculation) is that Wipr sets the fingerprint to a well-known value for privacy / anonymization reasons, and Meta is indeed using that to suggest related accounts.

▲alexinma 2 hours ago | parent | prev [-]

Good to know. thank you!

▲pmuse 3 hours ago | parent | prev [-]

It’s my personal laptop that I’ve only ever used and reoccurs after clearing Safari history fully.