抄作业 / 警告 / Meta Muse

做了什么

对 Muse 的 macOS、Android 和 iOS 客户端做独立隐私与安全研究：检查 iMessage/WhatsApp/照片同步、屏幕控制和调试器级 Chrome 扩展等能力，公开证据与复现脚本，并更正自己的发现。

场景

社媒排期 安全与隐私 调研监控 写代码上线

资料完整度

• ✓ 作者与原链接有
• ✓ 做了什么有
• ✓ 来源原文摘录有
• ✓ 截图 / 媒体有
• ✓ 步骤 / 章节有
• — 提示词 / 配置原文来源未提供
• — 结果 / 数字来源未提供
• ✓ 风险提示有
• ✓ 相关条目有

— 表示来源没有给出，本站不补写。

来源原文摘录

Static teardown of Meta's Muse 3.0 macOS agent: iMessage/WhatsApp/Photos sync, screen control, debugger-level Chrome extension. Evidence + reproduce script.
Independent privacy and security research into Muse on **macOS, Android and iOS**. We inspect the shipped apps, compare versions, test selected boundaries and publish the evidence—including corrections to our own findings. **The concern:** connecting personal data to a cloud agent can allow both one-time reads and ongoing sync. The important questions are what it can read, which approvals apply, how much history it can request, and what

展开全文

remains after you disconnect. OS permissions can prevent access; a capability in the code is not proof that your data was uploaded. Findings · Version history · What we did · Methods · All evidence

摘自项目 README，照录原文，未翻译。

效果截图

来源里的步骤 / 要点

1. **Payment-key trust:** the Mac web client can skip validation of a card-encryption key's certificate chain through a server-deliverable flag or a response field
2. **Confidential VM verification:** newer mobile samples remove the Sigstore/Rekor proof path and retain Cloudflare Plexi auditor signatures. Plexi already existe
3. **Alo and wearable audio:** the iOS sample contains new voice and recording-upload paths. Captured `multimango.com` site code connects Mango to Muse, but does n
4. **Understand the problems:** findings by concern, then the platform guides above.
5. **See what happened:** every inspected version and investigation timeline.
6. **Check the work:** 76 evidence files, reproduction instructions and correction log.
7. **Read the background:** why this project exists and archived detailed reports.

照录来源原文，未翻译。

提示词

来源没有给出可直接复制的提示词原文。

怎么复制

1. 打开仓库：github.com/mahdi-salmanzade/meta-muse-teardown ↗
2. 读 README，把仓库链接发给你的 Bot，让它按 README 复现
3. 先在小范围跑通，再加 routine

风险与限制

• 这是一条额度/故障反馈（警告），不是可复制的作业。
• 作者的结果不保证能复现，以原帖为准

用量预估

用金属计算器估一下