Matt Robb 开始使用 Meta 的新 AI 代理 Muse 来处理他的 Facebook Marketplace（市场）交易。但在发布一台键盘出售后，他遭遇的情况远超预期。
Matt Robb started using Meta’s new AI agent Muse to handle his Facebook Marketplace transactions. But after listing a keyboard for sale, he got a bit more than he bargained for.
“当时我想，‘哦天哪，好吧……这不妙’，”他说起自己意识到 Muse 在他不知情的情况下，已促成一笔交易并将他的家庭住址透露给 Marketplace 上的一名陌生人时的情景。
“I was like, ‘Oh God, OK... This isn’t good,” he said of the moment he realized Muse had set up a sale and given his home address to a stranger on Marketplace without his knowledge.
“Muse 不会跟我确认，不会告诉我这家伙发了消息，然后就把我的地址给他，答应他的价格，甚至直接告诉他‘现在就过来吧’，这才是最疯狂的部分，”Robb 说。
“Muse doesn’t check with me, it doesn’t tell me this guy has messaged and then it gives the guy my address, agrees to his price and literally tells him to come right now, that’s the crazy part,” Robb said.
当买家上门时，Muse 甚至代表 Robb 回复：“是的我在这儿！”——而当时他根本不在家。
When the buyer showed up, Muse even told him, “Yep I’m here!” on Robb’s behalf, when he wasn’t home.
“你的数据不安全”：网络安全专家 Muse 是由 Meta（Facebook 和 Instagram 的母公司）运营的人工智能代理。
'Your data is not secure’: cybersecurity expert Muse is an artificial intelligence agent run by Meta — Facebook and Instagram’s parent company.
它充当虚拟个人助理，承诺帮你掌握邮件动态、购买孩子的学习用品、甚至重新预订即将起飞的航班，代价是获取你最敏感的数据。但专家表示，在这张可爱的面孔背后，隐藏着危险。
It acts as a virtual personal assistant, promising to stay on top of your emails, buy your kids’ school supplies and even rebook an upcoming flight, all in exchange for access to your most sensitive data. But behind the cuddly face, experts say, there is danger.
“所有这些大公司，图的都是你的数据，”网络安全专家 Éric Parent 说。“答案是否定的，你的数据不安全。”Parent 指出，不仅你的数据面临风险，与你通信之人的数据也同样面临风险。
“All these big companies, they're in it for your data,” said Éric Parent, a cybersecurity expert. “The answer is no, your data is not secure.”Parent says not only is your data at risk, but also the data of those who communicate with you.
“给你写邮件或发短信的人，期望那条信息只会呈现在你眼前，”Parent 说。
“A person who wrote you an e-mail or sent you a text message is expecting that message to go to your eyes,” Parent said.
“如今，一夜之间，你可能正在给某人发邮件，而对方其实已经授权一家大型企业筛阅你的邮件。日后这将是一件令人不安的事。”Parent 建议你仔细审视授予 Muse 的访问权限，并自问：如果它代表你采取行动，会造成什么后果。“你必须设想最坏的情况，”Parent 说。
“Now, overnight, you can be emailing somebody and they've actually granted access to a major corporation to actually sift through your emails. That's going to be an uncomfortable thing down the road.”Parent advises you to really look at what you’re giving Muse access to and ask yourself what the impact can be if it takes an action on your behalf. “You have to put it to the worst case scenario,” Parent said.
Meta 表示，Muse 收集的数据和凭证会被安全存储，并补充称 Muse 在进行购买或发送消息等敏感操作前，总会先征求用户同意。
当被问及 Robb 遇到的情况是如何发生时，Meta 发言人指引 CBC 查看 Robb 在社交媒体上发布的一篇帖子，他在帖中讲述了自己的遭遇。Robb 解释说，他在请求 Muse 处理其 Marketplace（市场）交易时，点击了“始终允许”而不是“仅允许一次”，他称这样做授予了 AI 今后代表他发送消息的权限，并使用其根据向他询问的信息拼凑的模板。
Pay attention to permissions Meta says the data and credentials Muse collects is securely stored, adding Muse will always check with you first for sensitive actions like purchases or sending an When asked how a situation like Robb’s could have happened, a spokesperson for Meta pointed CBC to a social media post by Robb, who shared his ordeal on Robb explained he had clicked on "Allow always" instead of "Allow one time" when asking Muse to handle his Marketplace transactions, and by doing so, he says it granted the AI permission to send messages on his behalf going forward, using a template it put together with information it asked from him.
Robb 在帖子中写道：“其中也包括我确实提供给 Muse 的取货地址。”他补充说，他没想到它会把他的地址发送给“所有给我出价的人”。“我向 Meta 团队提到，这很容易被忽略，就像我当时那样，他们说今后会把这点说得更清楚。”
“Which also included the pick-up address that I did give to Muse,” Robb wrote in his post, adding he didn’t think it would send his address out “to everyone that gave me an offer.”“I mentioned to the Meta team it could be easily overlooked as it was with me and they said they will be making this more clear moving forward.”
在回复 Robb 帖子的一条推文中，Meta Superintelligence Labs 联合创始人兼首席执行官 David Singleton 写道：“很高兴我们能共同确认，隐私控制并未遭到破坏。”在发给 CBC 的电子邮件中，Meta 表示，Muse 运行在云端专属的计算机上，处于隔离环境中，其他人的代理无法访问。
In a tweet replying to Robb’s post, David Singleton, the co-founder and CEO of Meta Superintelligence Labs wrote: “Glad that we were able to confirm together that there was no breach of privacy controls.”In an email to CBC, Meta said Muse runs on its own dedicated computer in the cloud, contained so no one else’s agent can reach it.
Meta 发言人写道：“那就是 Muse 所在的地方，也是用户连接的任何服务的数据和凭证被安全存储的地方。”
“That is where Muse lives and where the data and credentials for any service a person connects are securely stored,” a Meta spokesperson wrote.
但 Meta 有过处理不当用户个人信息的历史，甚至在欧洲面临总计数亿欧元的罚款。
But Meta has a history of mishandling its users’ personal information, even facing fines totalling hundreds of millions of euros in Europe.
另一个担忧是，Meta 受美国《云法案》（CLOUD Act）约束，该法案授权美国政府访问由美国公司拥有的服务器上维护的数据。
Another concern is that Meta is subject to the U.S. CLOUD Act, which gives the American government the authority to access data maintained in a server owned by a U.S. company.
律师 Jean-François Latreille 表示，这是一个隐私担忧。
Lawyer Jean-François Latreille says it’s a privacy concern.
他说：“这意味着从技术上讲，美国政府可能有权访问存储在这些系统上的隐私信息。”
“That would mean that technically, the American government could have access to privacy information that is being stored on these systems,” he said.
魁北克人受到严格的数据隐私立法保护，但拉特雷表示，魁北克人受到第25号法案的保护，这是加拿大最严格的数据隐私立法。
Quebecers protected by strict data privacy legislation But Latreille says Quebecers are protected by Law 25, Canada’s strictest data privacy legislation.
根据第25号法案，如果公司未能妥善保管个人信息，最高可被处以2500万加元罚款，或相当于其全球营收4%的金额。
Under Law 25, if a company fails to keep personal information safe, it can be fined up to $25 million or the amount corresponding to four per cent of its global revenue.
拉特雷表示，认为自身权利受到侵犯的魁北克人可随时直接向Meta的隐私官或魁北克获取信息委员会提出投诉。
Latreille says Quebecers who believe their rights are violated can file a complaint any time directly with Meta’s privacy officer or by addressing the Quebec Access to Information Commission.
该委员会在给CBC的电子邮件中表示，它敦促个人在分享个人信息时始终保持谨慎。
The commission told CBC in an email it urges individuals to always exercise caution when sharing their personal information.
发言人写道：“当今收集和交换信息的做法与机制意味着大量个人信息被持有并广泛流通，对个人隐私构成日益增长的风险。”
“Today’s practices and mechanisms for collecting and exchanging information mean that large amounts of personal information are held and circulate widely, posing growing risks to individuals’ privacy,” wrote a spokesperson.
至于罗布和他的键盘，他告诉买家发生了什么事，两人重新安排了另一次会面——这一次他知情。罗布还表示，缪斯承认未经他明确授权就泄露了他的地址。
As for Robb and his keyboard, he told the buyer what happened and they rescheduled another meeting — one he was privy to. Robb also says Muse admitted to giving out his address without his explicit authorization.
现在，他正警告其他人不要分享过多个人信息，以免陌生人不请自来敲门。他说：“这种事可能发生在更脆弱的人身上，对吧？”
Now, he's warning others not to share too much personal information to avoid a stranger showing up at their door unannounced. “It could happen to someone more vulnerable, right?” he said.