Meta Museは友人・家族の人物ページを毎時更新、プロンプトで判明

One of Muse’s instructions appears to be the ability for it to create “a page for every person in the user’s life.” ／ This hourly process involves compiling data on family, partners, friends, colleagues, “collaborators,” and people you “follow,” the instructions say. ／ Muse’s documentation says that a page may start “sparse” and then be filled out over time, potentially including sections like Facts, History, The relationship, In common, Open threads, and Strengthening. Meta’s instructions say Muse should only use the “evidence” it has available, and that invented details are worse than an empty page. — 人物ページの作成、1時間ごとの情報集めの対象、ページの節の構成と作り話の禁止に関する記述より

Independent AI safety and security researcher Karan Joshi was able to extract an extensive array of Muse instructions and system prompts by using the regular chat interface to essentially ask Muse to copy and share its own software files. Joshi then shared his findings with WIRED. ／ “They’re trying to know you like a friend, which is honestly pretty creepy.” ／ “For any agent to be useful and actually help you achieve your goals, it needs to have context about you and those you interact with,” Meta spokesperson Daniel Roberts told WIRED in a statement. ／ Muse is architected so each individual user has their own dedicated virtual machine, which stores user data and context. This VM is inaccessible to other agents and users can wipe memories or disconnect external services at any time. — 研究者による抽出の方法、研究者の受け止め、Meta広報の声明、および仮想マシンの設計に関する記述より

“We are giving AI systems much more information about us than we are getting information from them,” says Carissa Véliz, an associate professor at Oxford’s Institute for Ethics in AI. “It’s not only what we explicitly tell them, but what they can infer from us—correctly or incorrectly, both concerning for different reasons—and what they can piece together from other sources of data.” ／ Miranda Bogen, the director of the Center for Democracy and Technology’s AI Governance Lab, says Muse appears to have more emphasis on relationships and personal contacts than rivals’ systems. ／ “These [AI assistant] tools are actively soliciting users to plug their whole lives in—their emails, calendars, financial institutions, everything in order to be helpful assistance,” Bogen says. — オックスフォード大学のヴェリス氏とCDTのボーゲン氏の発言より

Instead of saving him time, though, Muse ended up working behind his back. Without seeking his approval, it agreed to a lowball offer and gave the buyer his home address. — Facebook Marketplace の出品対応で起きた件に関する記述より

Museは利用者にとって大切な情報を記憶しますが、利用者はいつでも学習した特定の内容を「忘れて」と指示することができます。 ／ たとえばメールであれば、閲覧のみを許可するのか、本人に代わって送信することも許可するのかを選べます。 ／ アクセス権の変更やサービスとの接続解除は、いつでも行えます。また、自身のMuseとのやりとりをMetaのAIモデルの学習に利用させないよう、オプトアウトすることもできます。 ／ Museは、利用者の会話やVM内のデータをMetaの広告システムと共有しません。 ／ また、Museがこれまでに行った操作や、これから行う予定の操作について、利用者は完全な監査履歴を確認できます。 ／ 本年後半、Meta は「Muse Confidential VM」を導入します。これは、利用者のデータや Muse との会話を含む VM 全体が、利用者のみが保有する鍵によって暗号化される仕組みで、Meta でさえその内容にアクセスすることはできません。 — 記憶と「忘れて」の指示、アクセス範囲の選択と接続解除、学習のオプトアウト、広告との非共有、監査履歴、Confidential VM に関する記述より

All the files you put in your VM and everything Muse generates or uses on your behalf is stored there. You can inspect, edit and download these files freely, including Muse’s memory about you. — 仮想マシン内のファイルと記憶の閲覧・編集・ダウンロードに関する記述より