New by me - Microsoft Vibing. A very strange fake open source project published by Microsoft employees, which gathers screenshots and voice recordings of users with unique machine identifiers attached. Not sure how this one has happened.

https://doublepulsar.com/microsoft-vibing-capturing-screenshots-and-voice-samples-without-governance-6973c48f03a7

Microsoft Vibing — capturing screenshots and voice samples without governance

A look inside Microsoft Vibing, a fake open source project published by Microsoft that captures audio and screenshots of customers.

Medium
This Vibing one is a fun blog btw as every page it gets to be a bigger version of this
Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”. https://github.com/microsoft/VibeVoice/commit/e73d1e17c3754f046352014856a922f8208fb5d3

I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend.

Something tells me Microsoft are going to end up freezing the Azure backend for Vibing and having a security incident.

Vibing has been suspended and downloads removed pending a compliance review by Microsoft. https://github.com/VibingJustSpeakIt/Vibing

Also worth noting - Yaoyao Chang made the changes to the Vibing-Team repo, which is the first time Microsoft has officially been linked to Vibing.

It’s a very strange situation where MS were covertly operating an AI service, while pretending it was an open source project.

@GossiTheDog I feel like I'm being led into a Cyberpunk questline; with the unplanned discovery of a Redmond deniable op harvesting data out of a front operation.