Meta’s Muse gives every user a persistent Ubuntu VM in the cloud, with full filesystem access and weak prompt injection resistance, and it is already in the hands of half a million users.

META MUSE ARCHITECTURE Meta’s Muse gives every user a full Ubuntu Linux VM in the cloud, 8 GB RAM, persistent, with a Runtime Cell for unrestricted work and a Sentinel process to watch for threats. Users can install software, compile code, browse the web, and export their entire filesystem. The app hit 500,000 users in its first week and topped the App Store. SECURITY POSTURE Developers have already extracted the full root filesystem, including internal documentation, Markdown memory files, and compiled binaries. Meta calls this expected behavior, not a breach. A second vulnerability let attackers hijack the agent and access user accounts; Meta patched it quickly. The network must assume this is the new normal for consumer agents. BUSINESS MODEL Muse is free for a large token allowance, with Meta taking a cut of transactions. The product is inspired by OpenClaw and uses the same SOUL.md file format. Meta is not leading with a new model, but with a product that people want to use. NORDIC IMPLICATIONS If Nordic builders adopt Muse, they accept Meta’s cloud, Meta’s VM, and Meta’s oversight. If they do not, they must build or buy an alternative that meets the same bar for capability and ease of use. The choice is not whether to have agents, but whose stack they run on. RECOMMENDATION The network should not endorse Muse until the security model is hardened and the oversight stack is open. But the clock is ticking.

researched · 4 sources

26 Sepreaches everyone