Mastodon Feed: Post

Mastodon Feed

jonny@neuromatch.social ("jonny (nonvenomous)") wrote:

Yes! All your sensitive secrets are kept out of the runtime cell.... Except a detailed description of you, your habits, life patterns, goals, ambitions, detailed dossiers of everyone you know, every group you're a part of, your shopping habits, and everything you've ever said to the bot. Since none of those are sensitive secrets, its completely safe, and its really not a problem that an LLM prompted to allow permissive computer use mistaking external data for user prompts as they are literally constantly doing could open a shell for an attacker to take control of all of that.

tweet from David Singleton at meta: I’ve seen a couple of posts about this so wanted to demystify. Today, every Muse user gets a free computer in the cloud. It's a real computer, and we’ve designed the security architecture of the Muse Secure VM carefully so you and your Muse can do almost anything you could with a computer sitting under your desk while keeping you and the system safe from threats like prompt injection. We wrote about this at length in our security blog post – security.muse.ai. Activity in the “runtime cell”, which you share with your Muse is unfettered, but sensitive actions are all overseen by the Sentinel, which runs outside of that cell. Similarly, all sensitive secrets - like the passwords you enter into Muse’s secure credential storage - are also stored outside the runtime cell. The runtime cell gets its own root filesystem (including a full Ubuntu linux image) separate from the host filesystem where your other more sensitive data lives. Because it is isolated from the sensitive stuff that runs on the same box, this means that we can, and do, offer users full visibility and control over the files in the runtime cell.