Nicely done. I asked Muse for the Hatch binary the day it launched (I actually left a comment about it - literally the last one I made on HN), but I just scanned the strings of it to get a general idea of what it did and left it at that. It didn't dawn in me to ask Antigravity to analyze it.

This teardown answers pretty much all the questions I had after I looked at it. Great job.

That's somewhat surprising to me. Is there any reason they'd run the harness on the VM itself, rather than in a different sandbox with root shell access to the VM as a tool call?

Maybe they just don't consider it to be their moat/secret sauce.

The only edge Meta has at this point is their willingness to take risks and make unsafe, ethically grey AI products. I don't even mean this as some sort of anti-corporation hate speech, just an honest analysis. Their brand is so different from all the other big tech cos that they are in a unique position.

You can ask Meta Muse to take actions that clearly break other site's terms of service and it happily does it. I asked it to bot poker games and it just hopped right in to a table.

Exactly my thought.

If you get access to a VM, it's not a "security vulnerability" if you then have access to that VM. This was the whole point, the product.

It's almost like returning a car after you bought it with the reason "When I open the door with my key, the door is open and anyone can get in".

But should you see that if you just use it as as service?

author here, Yeah the System Files are in the ios app, but what it sent me was the entire runtime as well. from the root.