But Microsoft did not bring charges against Kibkalo then. Instead, the company fired him.
Kibkalo's LinkedIn profile said that he left Microsoft in September 2012. Not surprisingly, the profile does not mention his termination. At some point he relocated to Russia. In August 2013, he took a job with 5nine, which has offices in St. Petersburg and Moscow. 5nine bills itself as "the leading virtualization management and security company, offering the first and only agentless security solution for Microsoft Hyper-V."
Hyper-V is Microsoft's virtualization technology for its Windows Server platform. In instant message chats -- some of which were transcribed and included in Ramirez's filing with the court -- Kibkalo claimed that he had also leaked Windows 7 code before its release and had snuck into Building 9 on Microsoft's Redmond, Wash. campus in an unsuccessful attempt to copy data from a server there.
In an Aug. 3, 2012, instant message conversation, the blogger was alleged to have reacted to Kibkalo's offer to leak the Activation Server SDK with, "That's crossing a line you know pretty illegal. lol."
Kibkalo's alleged reply: "I know :)"
In a separate document filed with the Seattle federal court Wednesday, Kibkalo was ordered detained because he was a flight risk. "Defendant poses a risk of nonappearance due to ties in Russia and lack of ties to this District," the detention order, also filed Wednesday, read. Kibkalo did not oppose the detention.
Kibkalo has been appointed a public defender.
Sign up for CIO Asia eNewsletters.