Post

New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened. doublepulsar.com/microsoft-vi...

doublepulsar.comMicrosoft Vibing — capturing screenshots and voice samples without governanceA look inside Microsoft Vibing, a fake open source project published by Microsoft that captures audio and screenshots of customers.

The package family name for Vibing.exe is YaoyaoChang.Vibing_ssp53fcyfr9ha - the same MSFT employee who digitally signed it, and posted GitHub messages calling it a “good product” he apparently knew nothing about on the MS VibeVoice GitHub repo. 😬😅

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing (outside of my blog). It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

It’s certainly a screw up from a corporate point of view, there’s no way MS should be developing stuff like this. Collecting the machine GUID is crazy too.

An attempt to hide the MS link with Microsoft Vibing on GitHub - “This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.” - the commit hiding the compliance review has been redone today without Yaoyao’s name on it.

So @dangoodin.bsky.social asked Microsoft about Vibing - they’ve confirmed it is a research project. They say “We have removed the application as we review its functionality and adherence to our policies. We remain committed to responsible AI and are taking appropriate steps as part of this review.”

There’s other people in Microsoft Research Asia who have GitHub commits for the project, and ignored concerns when people raised them in Issues. It’s very strange. There’s a bunch more to this I’ve found but I’ve not written down yet as I’m waiting to see if MS want to own the narrative or not.