Post

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened. doublepulsar.com/microsoft-vi...

If you want to read a blog and pull this face, click the link btw. It's wild.

The package family name for Vibing.exe is YaoyaoChang.Vibing_ssp53fcyfr9ha - the same MSFT employee who digitally signed it, and posted GitHub messages calling it a “good product” he apparently knew nothing about on the MS VibeVoice GitHub repo. 😬😅

Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”. github.com/microsoft/Vi...

Vibing has been suspended and downloads removed pending a compliance review by Microsoft. github.com/VibingJustSp...

Microsoft are now trying to hide the compliance review message, by removing the download links and removing the compliance review messages on Github. github.com/VibingJustSp...

Epic screwup or something more sinister?

An attempt to hide the MS link with Microsoft Vibing on GitHub - “This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.” - the commit hiding the compliance review has been redone today without Yaoyao’s name on it.

New commit: github.com/VibingJustSp... Hidden commit: github.com/VibingJustSp...

this is such a weirdass string of events that i'm expecting Chang to be fired by the end of the month, either as a scapegoat or because this was actually his boneheaded idea from the start and wouldn't listen to anyone who told him "no"

There’s other people in Microsoft Research Asia who have GitHub commits for the project, and ignored concerns when people raised them in Issues. It’s very strange. There’s a bunch more to this I’ve found but I’ve not written down yet as I’m waiting to see if MS want to own the narrative or not.