Discussion

• @patrickwardle Patrick Wardle on x

  Please don't install - it's trivial to turn Muse into the ultimate backdoor 💀👀 Ya, as an AI assistant built to manage your Mac, Muse needs broad access to your digital life. But serious 0-day flaw(s) can let local malware/attackers invisibly hijack it. Let me show you. 🧵

• @patrickwardle Patrick Wardle on x

  And once a Mac is exploited, you can interact with any of the users “connected” devices also running Muse. ...meaning you remotely task their mobile (iOS) Muse client ...invisibly 📲🔓👀 What can you do? Welll, some very neat iOS stuff!

• @patrickwardle Patrick Wardle on x

  #4 Why is this bad? On a scale of meh to f*cked: 🎙️ Steal your dictated audio 💉 Inject prompts Muse trusts/executes 🔑 Steal your auth token & invisibly control Muse directly Anything you gave Muse access to? Now the (local) attacker has it too: msgs, emails, finances... 💀

• @opsek_io @opsek_io on x

  This is a new class of endpoint risk: personal AI agents. Please don't rush on every AI tool that ships. First understand the privileges you are actually granting. Muse is software with broad access to mail, files, messages, and whatever else you connect.

• @techspence Spencer on x

  “Macs can't get malware” 😅

• @severeengineer @severeengineer on x

  this requires local access, so while it needs to be fixed this isn't a doomsday scenario kinda thing i do still think giving contemporary agents root on your own machine is going to result in a lot of painful lessons though lol

• @cryptadamist @cryptadamist on x

  important PSA for mac users:

• @patrickwardle Patrick Wardle on x

  First, one of 0day PoCs: https://github.com/... Run with ‘-h’ for some fun options from the 50+ commands Muse exposes. Then click Muse's 🎙️ and dictate a prompt. That's the trigger. 👀

• @patrickwardle Patrick Wardle on x

  Used it to hack itself? 💀 But please fix, its trivial to exploit and (locally) take over the agent 😭 https://github.com/...

• @patrickwardle Patrick Wardle on x

  #3 (This) bug details Muse has an undocumented setting: endo_voyager_dictation_endpoint ...that can be redirected locally with no special privileges! So when you click 🎙️ and dictate a prompt, Muse sends it to the attacker's endpoint instead 🤦‍♂️

• @joy Joy Larkin on x

  Happy 0day Monday in personal agent land!

• @intcyberdigest @intcyberdigest on x

  ‼️ BREAKING: A zero-day has been released for Muse, Meta's new AI agent, and a Meta AI security engineering manager who left the company this month says he would never use it, citing security and privacy concerns. He was reacting to the zero-day a researcher posted, which lets ma…

• @hypervisible.blacksky.app @hypervisible.blacksky.app on bluesky

  I can't believe Meta would do this 🙄

• @dps David Singleton on x

  We appreciate this report and have issued a hotfix to the Muse Mac app. This was a local privilege escalation attack, not a remote exploit. Using it to do harm therefore requires malicious code already running on the user's machine under their user account and the practical risk …

• @aaronblackshear Aaron Blackshear on bluesky

  If you install this thing and give it this insane level of access to your computer and all of your accounts, you kind of deserve the finding out stage  —  arstechnica.com/security/202...

• @alexandr_wang Alexandr Wang on x

  we are excited for muse to be partnering deeply with @Shopify to enable agentic checkout with Shop Pay on all Shopify stores! we want to give our musers access to a wide range of stores to find the absolute perfect products ♥️

• @mattprd Matt Schlicht on x

  Muse 🤝 Shopify

• @joecarlsonshow Joseph Carlson on x

  Amazon will have to change directions quickly. I can already see the Meta representatives talking to Amazon “Sure, if you want to block us, that's unfortinate, we'll just send all our customers to Walmart and shopify

• @gergelyorosz Gergely Orosz on x

  I continue to be amazed how the tech industry doesn't realize that the majority of people won't hand over a digital wallet for AI agents to go and spend on stuff, because buying socks + groceries is not a chore to outsource w/o oversight, but an expense to manage...

• @matt_slotnick Matt Slotnick on x

  I wouldn't overly read into Amazon posture re Muse right now. Shopify obviously will play nice with meta and be a first mover. Amazon has more at stake and will be more demanding about the relationship, because they have leverage. they also have customer credential risk

• @firstadopter Tae Kim on x

  Big contrast to Amazon. Shopify doesn't have a big high profit margin ad business to protect.

• @illscience Anish Acharya on x

  After 20 years of being intermediated by Google every consumer internet company is now urgently trying to figure out how to be on the right side of this new traffic for margin trade. There is a seismic shift coming as agents quickly become the primary consumers on the Internet.

• @supbagholder @supbagholder on x

  Muse will benefit the long tail. Find the exact product niche you need. No better partner than SHOP.

• @finkd Mark Zuckerberg on x

  Teaming up with Shopify to make shopping and checkout easier in Muse. Shoppers find more. Shops sell more. More partnerships like this coming soon.

• @stockmarketnerd Brad Freeman on x

  I'm sure we'll inevitably be seeing a similar headline from $AMZN in the coming months as they figure disagreements out with $META

• @shpigford Josh Pigford on x

  there's a future where nobody goes to amazon anymore and just shops via their agent who (in the background) taps into the database of products across ALL shopify stores. while amazon blocks agentic shopping, shopify fully embraces it. can't wait for that future.

• @ankurnagpal Ankur Nagpal on x

  Sidenote: I also suspect Muse and other personal agents will be very good for Shopify An incredible opportunity to build network effects in an already very strong business

• @natlungfy Natalie Lung on x

  Meta's new AI agent, Muse, has quickly risen to the top of mobile app charts, a sign that the social media company is gaining traction in the increasingly crowded market for consumer AI assistants Sensor Tower recorded >902k app downloads in the six days after Muse's launch on Se…

• @steipete Peter Steinberger on x

  Because this “Meta uses OpenClaw” story is going around. They built their own agent, being inspired. Nat and his team did a great job. Kudos!

• @emollick Ethan Mollick on x

  It may be that people also feel safer giving their personal data to Meta (since they already use it) than to other AI companies. If you do decide to try out Muse, a reminder that you can turn off training on your data in Settings>Data controls>Help improve our AI models.

• @austinkoringark Austin Koring on x

  Consumer adoption for personal agents is accelerating significantly faster than the previous chatbot era as Muse debuted just 13 days ago. Within 8 days Muse has cleared 200k daily downloads. Comparing that to ChatGPT's launch it took almost an entire year to hit that milestone.

• @rihardjarc Rihard Jarc on x

  Like I was saying the $META Muse reception from users is even higher than that of ChatGPT: First 12 days: -Muse downloads 1.8M vs ChatGPT 1.3M -Muse DAU 642k vs ChatGPT 231k Agents are the real use-case of AI, chatbots were just a different version of Google Search.  The market i…

• @alexeheath Alex Heath on x

  Apptopia sent through these estimates on early Muse usage. External estimates but directionally interesting

• @loudmouthjulia Julia Alexander on x

  I'm using Muse, and I like it (clearly good word of mouth + decent product going into this activity), but doesn't Meta also have the advantage with launching new products that we've seen with Threads (ie, Instagram -> Threads/FB -> Threads) that makes user numbers alone finicky?

• @emollick Ethan Mollick on x

  I think Meta's Muse is an impressive implementation of the OpenClaw idea of AI as a personal assistant agent that you have an ongoing chat with. Since it is so focused on doing that well, the experience is very accessible for people who didn't realize what AI could do for them.

• @natfriedman Nat Friedman on x

  we built muse from scratch, but it is definitely heavily inspired as a product by openclaw. After I used openclaw in january I bought hundreds of mac minis for the MSL team and lots of us fell in love with using openclaw (and other personal agents). @steipete is a genius and his …

• @emollick Ethan Mollick on x

  The Labs are focused on enterprise, as that's where the willingness to pay for tokens is highest, so, even though their systems are capable of doing what Muse does out of the box, they are not as intuitive to use.  Also, Meta is giving away a lot of compute to make this work well

• @anshnanda Ansh Nanda on x

  Bruh... Muse is LITERALLY Openclaw for normies. It's actually just openclaw.

• @waitin4agi_ Varun Mayya on x

  Muse is sort of proof that the amount of intelligence we have is enough already. It just needed to be more agentic and better with our daily tools and platforms. Anything on PC I still do with ChatGPT and Claude. But Muse is winning my phone. Exceptional product work!

• @loudmouthjulia Julia Alexander on x

  I use Muse in a much more conversational (?) way versus ChatGPT (new Google) or Claude (actual productivity), which makes me think Meta could have an interesting product niche in the way that Threads is doing for at-scale “community” in post-Tumblr/bad-X world. But idk.

• @jspeiser Joe Speiser on x

  muse is the first ai my wife let me put on her phone. her #1 goal, help remove 163,490 promotional emails sitting in her gmail. Shes tried for years by hand, but gmail always freezes when selecting that many. Muse took 3 days, hit multiple gmail limits, but worked around them, an…

• @alexeheath Alex Heath on x

  Muse is as good as everyone says, but something I'm especially getting a lot of value out of is the Ideas and Feed tabs. Solves the cold start / empty chatbot problem by suggesting things I wouldn't think to prompt

• @alexandr_wang Alexandr Wang on x

  the most rewarding part about muse is seeing it make a difference for people who aren't in tech and don't give a shit about AI seeing muse click for people in my life outside of tech, and watching them use agents without having to know what a CoT or MCP or CLI are, feels like wha…

• @tobi Tobi Lutke on x

  We are excited to announce we are partnering deeply with Muse to enable agentic checkout with Shop Pay on all Shopify stores, offering people an easy and delightful way to shop and check out with Muse.

• @delrey Jason Del Rey on x

  Not only is Amazon blocking Meta's new @Muse AI personal agent, today it filed an amended complaint against Perplexity in an ongoing lawsuit over its Comet AI browser.  Coincidence or intentional timing?  Amazon is claiming that when Comet users on iOS shopped Amazon, Perplexity'…

• @shanumathew93 Shanu Mathew on x

  in this era of agents... i) AI companies develop cool new tool ii) cool new tool develops new use cases + makes prior friction-filled tasks much easier iii) incumbent company blocks access to said tool iv) repeat

• @mignano Michael Mignano on x

  This is proof that both: 1. Owning the UI is still a moat (for now) 2. The UI is under attack

• @buccocapital @buccocapital on x

  Amazon cuts off Muse. While I am bullish Meta and Muse, I think many people are overlooking the digital knife fight that's about to occur Nobody wants to get commoditized or layered here. Let the games begin

• @steipete Peter Steinberger on x

  The beauty of running a claw yourself: they cannot block you.

• @firstadopter Tae Kim on x

  What happens to Amazon's ad business if we all start using personal AI agents to comparison shop and buy for us?

• @justjake Jake on x

  Big monopolies will (fustily) attempt to maintain their eyeball advantage Agents are the new eyeballs. If the agents can't see you, you do not exist https://www.geekwire.com/...

• @rihardjarc Rihard Jarc on x

  I understand the first line of thinking that $AMZN doesn't like $META 's Muse to shop around, and people starting to use AI agents as the entry point for commerce, but this is the future.  I don't believe $AMZN has a chance of having its own world-dominant personal AI assistant t…

• @pitdesi Sheel Mohnot on x

  I hate it as a consumer but it is the right move for Amazon. Agents want to replace the storefront and level the playing field, but Amazon is big enough to say no. Owning the customer relationship matters even more than logistics imo. Will be interesting to see it play out.

• @cryptopunk7213 @cryptopunk7213 on x

  this is so stupid. banning ai agents from amazon will only guarantee the business dies. amazon's future *depends* on ai agents buying their cloud service, SaaS tools and retail products - why on earth would you ban this? Meta already has a deal with amazon that allows their e-com…

• @migueldeicaza Miguel de Icaza on x

  Happy to shop elsewhere. For books, I am now using https://bookshop.org/ anyways, as they support my local bookstore. Recommendations welcomed.

• @joecarlsonshow Joseph Carlson on x

  Amazon is going to have to deal with Muse.  There's no way around it.  Agents are not going away.  Amazon can't close their eyes and pretend they don't exist.  Today it's Muse, next it's ChatGPT's agent, then anthropics.  Users will adopt these in huge numbers.  Amazon will be fo…

• @suchenzang Susan Zhang on x

  the same knife fight is happening / happened in china: everyone is a walled garden. guess when ai emboldens everyone to build vertically, we all end up in the same place.

• @hkarthik Karthik Hariharan on x

  While Big Tech has the resources to combat the coming onslaught of personal agents, I worry more about the doctor's offices, dentist's offices, plumbers, etc that simply don't know what's coming and won't have the tech to stop it. This is likely to create another anti-AI backlash…

• @jyarow Jay Yarow on x

  AI agents are going to be blocked by the sites that would be most helpful for AI agents to use.

• @nikitabier Nikita Bier on x

  How important is AI to Meta?  Here's one easy tell: One of the launch features of the Muse app was auto-negotiating for stuff on Facebook Marketplace.  The poor product manager who owns Marketplace knows that millions of bots lowballing sellers will eventually kill the product.  …

• @migueldeicaza Miguel de Icaza on x

  No need to panic. Amazon will allow agents like OpenClaw and Muse to operate freely on their website once they upgrade their dark patterns to be agent-aware.

• @signulll @signulll on x

  this was always obvious, & i've written about it before. companies with real leverage will increasingly block agents from accessing them at a greater & greater place. amazon can do this without losing much at all because amazon is impossible to replace. but other companies won't …

• @afinetheorem Kevin A. Bryan on x

  Fascinating IO and strategy question. Owning “the gate” is very valuable. But for customers, having agents whose data is not held by the store they shop at, or augmented by that, or doing automated price comparison, is as well. The market power implications are *very* subtle.

• @joecarlsonshow Joseph Carlson on x

  Amazon blocks Muse. Sure, they will blame it on “security”. But Amazon made $76 billion in the last 12 months on advertising. Agents don't look at ads. A new age of agentic battle has begun.

• @nikesharora Nikesh Arora on x

  This will be a bigger battle than anyone anticipates.  It is only a matter of time before there is an Apple and Google version of Muse and possibly TikTok, in addition to the frontier LLM agents.  Maybe a commerce agent from Amazon.  Every app that is a services, marketplace or c…

• @nikillinit Nikhil Krishnan on x

  @buccocapital don't understand why Amazon is anti-agents using them that's how you know they've lost customer centricity - they care more about the ad revenue in the marketplace than actually enabling people to buy things easily

• @hamids Hamid on x

  Blocking @muse feels like a HUGE mistake by $AMZN. I don't think if @JeffBezos was running Amazon, they would make such a mistake...the love/convenience and cost of switching from Amazon to some other vendor is why Amazon keeps its customers, but in a world where my agent does th…

• @altryne Alex Volkov on x

  Wet simple way around this: Add a user home proxy feature (grok already does) Another way is: Amazon gets sued for this by users or users go Elsewhere where their assistants are welcome

• @timsweeneyepic Tim Sweeney on x

  @pkafka @DelRey If Amazon is reduced to a fulfillment company, other fulfillment companies and direct shippers we be able to pass on enormous savings. This does seem inevitable given how bad the Amazon shopping experience is.

• @kevindstevens Kevin Stevens on x

  @buccocapital This seems shortsided. I've been ordering groceries via Muse, and would figure that easier shopping = more spending.

• @eric_seufert Eric Seufert on x

  The knife fight already took place; it ended a year ago, when I wrote the first entry in my Agentic commerce is a mirage series.  Amazon began blocking agents last July; it's currently *suing* Perplexity over autonomous shopping with Comet.  Amazon won't capitulate; it doesn't ha…

• @chamath Chamath Palihapitiya on x

  This wrinkle is indicative of a bigger problem: the behavior of agents are still quite naive and help amplify a bunch of issues wrt the direction of AI - most importantly including those of strategy and long term competitiveness.  I suspect everyone will start blocking everyone s…

• @eric_seufert Eric Seufert on x

  Agentic commerce is a mirage (part 4)

• @tekbog @tekbog on x

  many services are gonna start doing that, your personal assistant is gonna have a hard time

• @benjamingoggin Ben Goggin on x

  Worked just fine for my Muse last night. Without me asking it ordered 14 gallons of zinc sunscreen, a gold chain, and 300 pounds of Wagyu. [embedded post]

• @mattdeitke Matt Deitke on x

  Barnes & Noble was a huge incumbent that was slow to the web when Amazon wasn't. If shopping moves from browsing websites to asking agents, being the commerce layer every agent can transact with could be an enormous advantage. Interesting to see if history repeats.

• @inductionheads @inductionheads on x

  Startup idea: e-commerce website that actually lets agents shop on it

• @compound248 @compound248 on x

  Meta can take a moral position on this when it opens IG and FB to everyone else's crawlers.

• @supbagholder @supbagholder on x

  The whole point of shopping on $amzn is convenience. They'll eventually let muse shop for users once they see muse go on other websites like Walmart. “Hey, btw, Walmart+ and you get your package within an hour, subscribe to it with your order?” Thads how you lose $amzn

• @nicbstme Nicolas Bustamante on x

  The most insightful thing I read about technology eleven years ago was @benthompson 's Aggregation Theory.  Amazon blocking Muse is another perfect example.  Customers want one agent that knows them and can get things done.  The platforms being aggregated want the opposite.  They…

• @ericjhonsa Eric Jhonsa on x

  A couple of recent shopping experiences that drove home to me how much AI/agents could reshape commerce: 1) I spent 20 minutes on $AMZN trying to find a ~70

• @elonmusk Elon Musk on x

  @buccocapital Amazon won't be able to tell whether the buyer is a human or an AI acting on their behalf if access is via the user's IP address & cookies

• @trevin Trevin Chow on x

  1. Earlier this year, Amazon was caught scraping and doing delegated buying with their “buy for me

• @joecarlsonshow Joseph Carlson on x

  I can already hear the Meta spokesperson “Sure, Amazon, that's up to you if you want to block Muse, we'll just route all their shopping to walmart . com”

• @pkafka Peter Kafka on x

  Amazon redefined retail, reshaped countless businesses. Now at risk itself from ai shopping agents like Instinct and Muse, which threaten to turn it into a brandless logistics company. Discussed with @DelRey last week. https://podcasts.apple.com/...

• @zooko @zooko on x

  We need a legal precedent that as a human, I have a right to delegate my shopping to my human personal assistant or to my AI personal assistant and if Amazon tried to prevent me from doing that I will sue them. /cc @albertwenger

• @obrien Chris O'Brien on x

  If I can't use Facebook agents to shop for SHEIN and Temu from Malaysian third-party hustlers on Amazon, is life even worth living?

• @lutherlowe Luther Lowe on x

  There are going to be antitrust issues with Muse out of the gates. We've seen Meta's playbook to spur adoption. I'm already getting nudges in Instagram, and the patterns will get darker (see Threads). Can Meta keep up the pro-open/white knight schtick while force-feeding its AI?

• @jeiting Jacob Eiting on x

  honestly, happy to buy from anywhere if it supports Muse with Link or even just redirect me out to the amazon app is fine i will buy less amazon stuff with this change

• @jrichlive Jeff Richards on x

  Amazon's ad business does $68B a year in revenue. No one should be surprised by this move. Many dominoes to fall in this landscape as a whole new wave of agreements gets negotiated (will get done)...🤞 https://www.geekwire.com/...

• @signulll @signulll on x

  the likely resolution to the meta / amazon fight is some kind of revenue sharing agreement where meta pays amazon for agent access through muse. there is no doubt the bd teams are cooking here on an agreement. facebook likely is fine eating the short term costs here to make muse …

• Todd Bishop Todd Bishop on linkedin

  We broke the news overnight that Amazon is blocking Meta's Muse AI assistant from shopping on Amazon, citing data security and other concerns. …

• @karlbode.com Karl Bode on bluesky

  the future is going to look a lot like the past  —  as in, endless gamesmanship as giant corporations attempt to ratfuck each other

• @jaykaydee Jacob Kramer-Duffield on bluesky

  As @reckless.bsky.social has noted, this is a core limitation of the very idea of AI agents.  Why would you, as the owner of a website, allow another company to eat your userbase and disintermediate your own retention and design decisions in favor of their own?  —  Ppl saw what h…

• @emilprotalinski Emil Protalinski on bluesky

  Given that last month, a US appeals court let Perplexity's AI shopping agent back on Amazon, will Meta sue Amazon or does it value their many cloud deals too much? [embedded post]

• r/artificial r on reddit

  Amazon blocks Meta's Muse personal assistant

• r/technology r on reddit

  Amazon bars Meta's Muse AI from shopping on its site

• r/cybersecurity r on reddit

  Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

• r/wallstreetbets r on reddit

  Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

• @jeremiahdillon Jeremiah Dillon on x

  For personal agents to be truly useful, they need access to everything. This also makes them particularly dangerous if they end up working for someone else... https://arstechnica.com/...

• Rohit Nathany Rohit Nathany on linkedin

  You were SO CLOSE to checking out!  —  That was the subject line in my inbox minutes after I exited the shopping task on Muse. …

• Khalid Chao Khalid Chao on linkedin

  🚀 Shop Pay is coming to Meta's Muse.  —  Muse already launched with Shopify merchants discoverable through Shopify Catalog and a Shopify-powered direct checkout. …

• Al Sohrabi Al Sohrabi on linkedin

  Meta 🤝 Shopify with Muse 🛍️  —  What it means:  —  • Muse searches Shopify's catalog and checks out right in the conversation …