Post B5n9dUuyPJ0ovE1zv6 by GossiTheDog@cyberplace.social
 (DIR) More posts by GossiTheDog@cyberplace.social
 (DIR) Post #B5aewLnD87JXeAOIs4 by GossiTheDog@cyberplace.social
       1 likes, 1 repeats
       
       New by me - Microsoft Vibing.  A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened. https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7
       
 (DIR) Post #B5agRtTw1a9b3xyo4G by Rairii@labyrinth.zone
       0 likes, 0 repeats
       
       @GossiTheDog for what it’s worth, the package family name of this thing is YaoyaoChang.Vibing_ssp53fcyfr9ha - in my opinion it doesn’t seem to look like anything “official”, but rather an employee releasing it on their own partner center account?
       
 (DIR) Post #B5ahWyI1fyphNPOWQ4 by GossiTheDog@cyberplace.social
       1 likes, 0 repeats
       
       @Rairii the problem is the Azure front door is MSFT tenant.. and they're pretending it's not them I think?
       
 (DIR) Post #B5cEc10eTzTouBEyzA by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       This Vibing one is a fun blog btw as every page it gets to be a bigger version of this
       
 (DIR) Post #B5cEc1JnKonBrYCGp6 by GossiTheDog@cyberplace.social
       1 likes, 0 repeats
       
       Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”. https://github.com/microsoft/VibeVoice/commit/e73d1e17c3754f046352014856a922f8208fb5d3
       
 (DIR) Post #B5cEc1XyU68QZWpavQ by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend.Something tells me Microsoft are going to end up freezing the Azure backend for Vibing and having a security incident.
       
 (DIR) Post #B5ePeVoYPRy4pstY4u by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       Vibing has been suspended and downloads removed pending a compliance review by Microsoft. https://github.com/VibingJustSpeakIt/Vibing
       
 (DIR) Post #B5ePeWDMvBok4qVMky by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.
       
 (DIR) Post #B5ePeWPQCNSUgE8zXk by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       Vibing has been removed from Microsoft Store:
       
 (DIR) Post #B5ePeWctOIEZM0RkXY by Rairii@labyrinth.zone
       0 likes, 0 repeats
       
       @GossiTheDog as someone familiar with the microsoft store, that's "been made unavailable to download if you didn't already have it". the file is still available on the backend and anyone who already had it can still redownload as usual"removed" in this case would be "the store listing, dcat page, etc all 404"
       
 (DIR) Post #B5ePeWs8TcQY7HZvIe by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       Microsoft are now trying to hide the compliance review message, by removing the download links and removing the compliance review messages on Github. https://github.com/VibingJustSpeakIt/Vibing/commit/ab8e6302543754685f85cf02e02d1d0287d2f4f0
       
 (DIR) Post #B5gwnLtmKZeTUb57DM by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       Did anybody happen to the screenshot or archive the Microsoft Vibing website ( https://vibingjustspeakit.github.io/Vibing/ ) and Github ( https://github.com/VibingJustSpeakIt/Vibing/ ) showing the compliance suspension messages before they were deleted?  The changes are archived on GitHub, but I'd like to document what they looked like prior to removal.
       
 (DIR) Post #B5gwnM7xTqziCZiRJg by Rairii@labyrinth.zone
       0 likes, 0 repeats
       
       @GossiTheDog you can view the repo at a specific commithttps://github.com/VibingJustSpeakIt/Vibing/tree/c61bb2d407796667307a9c47aac8c07592d0eddb
       
 (DIR) Post #B5n9dUuyPJ0ovE1zv6 by GossiTheDog@cyberplace.social
       1 likes, 0 repeats
       
       An attempt to hide the MS link with Microsoft Vibing on GitHub - “This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.” - the commit hiding the compliance review has been redone today without Yaoyao’s name on it.New commit: https://github.com/VibingJustSpeakIt/Vibing/commit/84c82ccad2092b4bc2dffe5c96ef8c8d4466cc6eHidden commit: https://github.com/VibingJustSpeakIt/Vibing/commit/ab8e6302543754685f85cf02e02d1d0287d2f4f0
       
 (DIR) Post #B5n9dVbrppK74G6FmK by GossiTheDog@cyberplace.social
       0 likes, 0 repeats
       
       So @dangoodin asked Microsoft about Vibing - they’ve confirmed it is a Microsoft research project. They say “We have removed the application as we review its functionality and adherence to our policies. We remain committed to responsible AI and are taking appropriate steps as part of this review.”
       
 (DIR) Post #B5n9e9FETOz7zdok3E by hitem@infosec.exchange
       1 likes, 0 repeats
       
       @GossiTheDog LMAO and the internet will forget in 2 days time. they bank on it.