New by me - Microsoft Vibing.

[rairii@labyrinth.zone]

@GossiTheDog@cyberplace.social for what it's worth, the package family name of this thing is YaoyaoChang.Vibing_ssp53fcyfr9ha - in my opinion it doesn't seem to look like anything "official", but rather an employee releasing it on their own partner center account?

[rootwyrm@weird.autos]

@GossiTheDog oh, it's pretty goddamn obvious exactly how this one happened.

See also: GitHub's official applications abruptly sprouting similar levels of spyware and calling it 'telemetry.'

[panjkov@mas.to]

@GossiTheDog I just reported it through Microsoft Store links. Let's see if anything comes out of it.

[systemadminihater@cyberplace.social]

@GossiTheDog There is no oversight at the company.

[panjkov@mas.to]

@GossiTheDog cc @shanselman

[gossithedog@cyberplace.social]

@Rairii the problem is the Azure front door is MSFT tenant.. and they're pretending it's not them I think?

[jukkan@mstdn.social]

@GossiTheDog Now that Microsoft has a 24/7 OpenClaw team in Oslo, I expect a lot more vibe artifacts appearing from within their network...
https://mstdn.social/@jukkan/116449605862675745

[layan2002@mastodon.social]

@GossiTheDog

[samir@mastodon.functional.computer]

@GossiTheDog At last, we can cut out the middleman and just put the malware authors in the OS company.

Sorry, Jia Tan, you’re out of a job.

[garretsidzaka@mastodon.social]

@GossiTheDog
WHAT THE HOLY HELL AM I READING!!??!!!?!!!??

[gossithedog@cyberplace.social]

@GarretSidzaka

[crazypedia@pagan.plus]

@GossiTheDog th- thats- it just... yikes

[gossithedog@cyberplace.social]

Since publishing my blog, Yaoyao Chang, who authored Vibing, has removed references to it from Microsoft’s VibeVoice repo - marking the change as “removing outdated links”. https://github.com/microsoft/VibeVoice/commit/e73d1e17c3754f046352014856a922f8208fb5d3

[kuniti_shino@pounced-on.me]

@GossiTheDog @Rairii that looks like a llm speaking

[purple@tech.lgbt]

@GossiTheDog just as well the void has no token accounting, I'd be destitute

[nyanhp@metalhead.club]

@GossiTheDog this is all very surreal 🫠
On the other hand, Microsoft could be preparing a new season of their Standards of Business Conduct training "Trust Code" in the wild

[birkenator@mastodon.social]

@GossiTheDog Microslop at it again

[gossithedog@cyberplace.social]

I withheld a load of details from the blog on this so far btw, if you're a researcher and want a laugh pull the binaries and have a look at what the MS Research team were doing and poke the backend.

Something tells me Microsoft are going to end up freezing the Azure backend for Vibing and having a security incident.

[agnew_hawk@mastodon.social]

@ColinHaynes

With a complimentary head-desk, just in time for weekend.

@GossiTheDog

[interpipes@thx.gg]

@GossiTheDog You really expect Microsoft to do anything meaningful at all in response to this? I don't really think they've earned that trust lately