Copilot edited an ad into my PR

(notes.zachmanson.com)

259 points | by pavo-etc 2 hours ago

35 comments

  • anton-g 37 minutes ago
  • khvirabyan 49 minutes ago
    Just thinking, could it be that your coworker used Raycast to spin up a codex to review and fix the typo on the PR? And that comment was added by Raycast?
  • WD-42 1 hour ago
    Why is copilot doing this? If they wanted to show ads couldn’t they… just show ads? Or is GitHub such a house of cards at this point that editing pr descriptions is the only way without risking another 9 of downtime?
    • flogy 49 minutes ago
      Are we sure this actually is originating from MS Copilot itself? Technically I believe it would be possible to smuggle ads into PRs using prompt injection too.
    • oefrha 56 minutes ago
      If they show the ad on github.com, agents accessing the PR using (an outdated, ad-free version of) gh CLI won’t see it. /s

      (That said I’m rather skeptical of this and would like to see more details of the process that produced this, and proof.)

      Edit: Just noticed this official GitHub blog post from last month advertising Raycast, making this story a lot more believable: https://github.blog/changelog/2026-02-17-assign-issues-to-co...

      • MattGaiser 36 minutes ago
        It could simply be something in the Raycast integraton?
        • oefrha 29 minutes ago
          I said it’s more believable than GitHub randomly advertising a non-GitHub product (my initial read of the situation, which seemed highly unlikely).
  • post_below 1 hour ago
    Assuming this isn't a hoax, this seems like a huge, probably unintentional, mistake by MS.

    If they genuinely implemented something like this, whatever they made from new customers via ads couldn't possibly make up for the loss of good faith with developers and businesses.

    I suppose if it's real we'll see more reports soon, and maybe a mea culpa.

    • altairprime 1 hour ago
      That’s a really tasteful Juno Mail footer implementation for a mistake. If the AI self-invented it on a lark, good job, but it reads very strongly like someone intended it.
    • chrismorgan 1 hour ago
      How could you implement something like this by accident?
      • rhet0rica 13 minutes ago
        That's a good question! I'm sure we'll find out eventually.

        z Quickly spin up Hacker News comments from anywhere on your macOS or Windows machine with a lobotomy.

      • sheept 46 minutes ago
        One feasible scenario could be that they are working on/experimenting with ads, and it was put behind a feature flag, but for whatever reason it was inadvertently ignored
      • bigyabai 49 minutes ago
        LLMs aren't known for being super deterministic.
    • ccppurcell 20 minutes ago
      Not a hoax, you can search GitHub prs for this string and find many hits.
    • goodusername 1 hour ago
      Yeah, would be good to have confirmation that this happened to others as well.

      But it really seems like an own goal if true.

    • tossandthrow 56 minutes ago
      It is likely not a hoax and likely very intentional.

      If you look at the positioning, someone has definitely justified that this is benign and a reasonable place to have an ad added in.

  • nialse 1 hour ago
    Microsoft injecting permanent ads in PRs? Has this been independently confirmed?

    Brought to you by Carl’s Jr.

    • blitzar 7 minutes ago
      Todays independent confirmation is brought to you by Microsoft — Empowering every person and every organization on the planet to achieve more.
    • longislandguido 1 hour ago
      > Brought to you by Carl’s Jr.

      I'm reminded of Jay Mohr's legendary take some years back on the creepy Carl's Jr. commercials:

      https://www.youtube.com/watch?v=OJlYRS2Vqkw

  • pinkmuffinere 1 hour ago
    I think they want the free advertisement, like Apple with its “sent from iPhone” addendums. But “sent from iPhone” is sometimes useful, and significantly shorter. If they just left it at “edited with copilot” I think it would be tolerable
    • computomatic 12 minutes ago
      I don't think the issue is the sign-off so much as that an existing PR was edited. Claude Code signs off when creating PRs and nobody seems bothered. But it won't edit an existing PR, and it won't sign off if I simply ask it not too (which I've automated). Editing any PR it touches - including one authored by someone else - is downright rude.
      • marcus_holmes 5 minutes ago
        > Claude Code signs off when creating PRs and nobody seems bothered

        Not only unbothered, but genuinely appreciative of the notification.

    • silisili 49 minutes ago
      That's exactly where my mind went. It's zero percent more insulting to me than 'sent from my iPhone.'

      If you don't want copilot garbage in your PRs, maybe don't use copilot to create or edit them?

    • winrid 46 minutes ago
      It already does that, too, with the co-author
  • simonw 59 minutes ago
    Which Copilot was this? There are a bunch of different products that share that name now.
    • SchemaLoad 55 minutes ago
      Microsoft has had a lot of naming blunders in the past but this has to be their worst. Copilot is currently, a tool to review PRs on github, the new name for windows cortana, the new name for microsoft office, a new version of windows laptop/pc, a plugin for VS code that can use many models, and probably a number of other things. None of these products/features have any relation to each other.

      So if someone says they use Copilot that could mean anything from they use Word, to they use Claude in VS Code.

      • protocolture 40 minutes ago
        >Microsoft has had a lot of naming blunders in the past but this has to be their worst.

        Nah I still rate "Windows App" the Windows App that lets you remotely access Windows Apps. I hate it to death, its like a black hole that sucks all meaning from conversations about it.

        • ValentineC 33 minutes ago
          "Microsoft Remote Desktop" was such a good and distinct name. RIP.
      • hsbauauvhabzb 52 minutes ago
        It’s probably a useful feature: if it’s named copilot, assume it’s slop and avoid it.
  • ex-aws-dude 1 hour ago
    How long before the LLM makes sponsored decisions in the actual implementation?

    "It looks like the user wants to add a database, I've gone ahead and implemented the database using today's sponsor: MongoDB"

    • tossandthrow 55 minutes ago
      Likely already happening.
      • nubinetwork 0 minutes ago
        To be fair, Gemini did try to get me to buy some nucleo144s recently...
  • bryanhogan 27 minutes ago
    Whatever the reason for the inclusion was here, the general problem is much bigger. People / companies / products can influence the direction of AI answers to put them in a better light and to be recommended more often. This isn't limited to just products even.
    • SV_BubbleTime 25 minutes ago
      If not on the surface, we’re all deep down aware that an initial era of an advertising-free new technology is once again almost over.

      See you on neural links before “sponsored thoughts”.

  • napo 58 minutes ago
    I wonder if 1) the PR was created using Raycast and this is the model signing its PR, or 2) if there was some prompt injection done at some point.

    Either of these options would still be bad, but here the author suggests that it's just copilot that now just injects ads in its output.

  • gherkinnn 28 minutes ago
    Obnoxious ads in LLM output was my only 2026 prediction. But I expected OpenAI to get there first and wasn't sure whether the AI companies would first add traditional ad boxes or go straight for blighted responses.
  • pabrams 1 hour ago
    Why are you "summoning copilot" to correct a typo?
  • turtleyacht 1 hour ago
    Do you drive by a billboard that reads

      Does advertising work?
      Just did!
    
    Raycast is an application launcher thing:

    https://en.wikipedia.org/wiki/Raycast_(software)

    Ray casting, however, is different:

    https://en.wikipedia.org/wiki/Ray_casting

  • raincole 34 minutes ago
    Is Raycast even a product of Microsoft? If not, are we witnessing the first large scale prompt injection abuse?
  • pants2 1 hour ago
    Was Raycast bought by GitHub or something? Why would it be advertising for Raycast?

    Brought to you by Wendy's.

  • oakpond 37 minutes ago
    I notice this kind of "Sent from iPhone"-type spam with other AI tools too. It's awful.
  • Surac 53 minutes ago
    as a non native speaker here please explain the meaning of PR to me.
    • hsbauauvhabzb 50 minutes ago
      Pull request, which is a request to merge changes in a git repository.

      Or (not in this case) public relations , which is an interface with how the public views your product, service or company. In this case, copilot adding advertising into git pull requests is bad public relations for Microsoft, but the article author is referring to pull request as PR

  • idkwhatimdoing2 1 hour ago
    Its like microsoft wants to be google, except its very intrusive.

    time is money, save both. try ramp.

  • charcircuit 41 minutes ago
    This looks like an ad for only Raycast which does not appear to be affiliated with Microsoft or GitHub at all so blaming Copilot or GitHub here is not justified.

    Edit: The link in the promotion goes to https://docs.github.com/en/copilot/how-tos/use-copilot-agent...

    Which does show that this is affiliated with GitHub unlike what I thought. There are no mentions of this string in a code repository on GitHub (including the Raycast copilot extention).

  • hsbauauvhabzb 49 minutes ago
    It was only a matter of time.

    Sent by my iPhone using tapatalk

  • hexasquid 1 hour ago
    I'm so tired of what initially looks like a perfect normal communication between two people, only to find that some third party has inserted itself like a parasite to exploit and extract human attention. That's why I use our sponsor, nord vpn ...
  • vcryan 33 minutes ago
    I'm not a fan of LLM's injecting themselves into PR/commit content. If you use multiple models, basically whichever one is operating git gets all the credit. But, even if you wrote all the code yourself, and just submitted the PR with Claude Code (or whatever) it would attempt to take credit for the changes.

    I currently have rules in all of my skill files forbidding models from advertising themselves or taking credit.

  • martianlantern 1 hour ago
    Why are they doing this?
  • MattGaiser 43 minutes ago
    Post the trajectory if this is real.
    • gpvos 1 minute ago
      What do you mean with trajectory? Also, a simple github search will show you many hits for the Raycast text, proving that this is quite real.
  • iomer 34 minutes ago
    crappy much. wow.
  • anshumankmr 1 hour ago
  • with 1 hour ago
    Everyone is doing this now. Granted, on Codex / Claude Code, you can disable it, it’s not the default to have it disabled. For some reason on Cursor, they keep shoving the “Made with Cursor” into my PR description despite me disabling attribution, which looks really stupid on a work PR.

    I’m so tired of all this BS. Why did this become normal? and how do we not read this as cheap advertising?

    • annie511266728 32 minutes ago
      I think people read it as cheap advertising because a PR isn't really the tool's output, it's team communication.

      A little "made with X" in your own draft is one thing. Putting branding into a PR your coworkers have to read is another.

  • GN0515 1 hour ago
    But... why?
  • dinakernel 1 hour ago
    Seriously? Dont they want their system to succeed? I cant think of a better way of alienating the target customer than this.
  • treysu 7 minutes ago
    [dead]
  • claytonia 36 minutes ago
    [dead]
  • winna 33 minutes ago
    [dead]
  • 10keane 55 minutes ago
    [dead]
  • ookblah 35 minutes ago
    maybe every PR should be run through 2 other llms so they just remove the ads of competitors (or i guess you'll end up with all 3) /s
  • daemin 1 hour ago
    Using a LLM to fix a spelling mistake is retardedly lazy.

    Presumably they used a free version of the LLM, therefore it is completely understandable that it inserted a snippet of text advertising its use into the output. I mean using a free email provider also adds a line of text to the end of every email advertising the service by default - "Sent from iPhone" etc.

    • onion2k 1 hour ago
      Using a LLM to fix a spelling mistake is retardedly lazy.

      If you do it manually, sure.

      If you have an agent watching for code changes and automatically opening PRs for small fixes that don't need a human-in-the-loop except for approving the change, it's the opposite of lazy. It eliminately all those tedious 1 point stories and let's the team focus on higher value work that actually needs a person to think about it.

      Given time all small changes will be done this way, and eventually there won't be a person reviewing them.

      • pabrams 1 hour ago
        That scenario doesn't require any explicit "summoning", and if there's a human in the loop approving the change, certainly they can fix the typo themself.
      • ex-aws-dude 46 minutes ago
        Sounds like a great use of energy and tokens, not overkill at all

        In fact I don't even use Ctrl + F anymore and instead just use Claude for all my searches

    • LeoPanthera 1 hour ago
      [flagged]