I can’t believe they put ads there
Chapters6
Covers a remote code execution vulnerability added to Notepad and the prevailing sense that Microsoft’s choices around Notepad were a misstep.
Microsoft Copilot started injecting ads into GitHub PRs, sparking backlash and a quick pullback; the fiasco highlights concerns about AI features overshadowing core dev needs.
Summary
The PrimeTime’s video dives into a recent Microsoft move that felt like a misstep straight out of a PR nightmare. The host rails against what he calls the dumbest thing Microsoft has done, framing it as a potential April Fool’s joke that wasn’t funny at all. He recalls Notepad’s security vulnerability as a dig at longstanding Microsoft products, setting the tone for a broader critique of Microsoft’s priorities. The focal point is Copilot’s unintended ad-like messaging appearing in GitHub pull requests, reportedly originating from a Raycast integration and quickly being disabled after widespread visibility. The host quotes examples from the incident, including a prompt that claimed to “start Cop-ilot coding agent tips” and an ad-like description tied to Raycast. He notes that within hours, thousands of PRs carried the unintended addition, which raised questions about product tips versus advertising. Beyond the specific incident, he argues that GitHub’s shine is dimming under Microsoft’s AI-centric strategy, prioritizing automation adoption over user-focused necessities. The segment closes with a personal aside on developer culture, uptime metrics, and a tongue-in-cheek promotion for Cron coffee, underscoring the chaotic, humorous energy of the video while maintaining a pointed critique of the tech giant’s direction.
Key Takeaways
- Copilot briefly injected an ad-like promotional blurb into GitHub PR descriptions, tied to Raycast, before being pulled back.
- Thousands of PRs (around 11.4k) were affected in a short window, illustrating rapid, uncontrolled propagation.
- GitHub’s uptime and incident metrics are used satirically to criticize performance under Microsoft’s ownership.
- The incident is framed as evidence that Microsoft is prioritizing AI adoption over developer needs on a platform for developers.
- The host emphasizes a broader pattern: AI features superseding user-centric quality and platform reliability.
Who Is This For?
Developers and software engineers who rely on GitHub and Copilot, plus tech watchers curious about how AI features impact developer workflows and platform trust.
Notable Quotes
"This is in fact Microsoft doing perhaps the dumbest thing I have ever seen Microsoft do."
—Opening strong critique setting the tone for the video.
"Copilot is now injecting ads into poll requests on GitHub."
—Central incident description driving the discussion.
"The feature or the feature has already been pulled."
—Indicates quick rollback after backlash.
"Start Cop-ilot coding agent tips." I mean, these guys legitimately thought that this felt like a tip and definitely not an advertisement."
—Highlights the ambiguity and controversy around the prompt.
"This is one of those rare moments where I genuinely feel we are watching the downfall of something that I just could have never been convinced would have fallen down."
—Author expresses deep concern about GitHub under Microsoft.
Questions This Video Answers
- How did Copilot ads end up in GitHub PR descriptions and why was it pulled so quickly?
- Did Raycast benefit from Copilot’s accidental advertising, and what happened to that partnership?
- Why are developers worried about GitHub’s shift toward AI features over reliability and uptime?
- What exactly went wrong with Copilot’s PR tips and how did Microsoft respond?
- Is GitHub still primarily a coding platform or becoming an AI platform, and why does that matter to developers?
GitHubGitHub CopilotRaycastAI integrationNotepad vulnerabilityMicrosoft acquisition of GitHubApril Fools-esque product changes
Full Transcript
Well, welcome back to the channel and me talking about Microsoft. Now, I know this is turning into a weekly ritual where uh Microsoft is going to do something stupid and then we're going to make fun of it on this channel. But today, it was so bad. It was so unbelievable. I actually didn't believe it. When I saw it, I said, "No, no, no, no. This is one This is It's almost April, fools. Okay, it's almost April 1st. I'm not going to fall for this kind of gag." Okay, this is one of those little foreplay, a little pre-warmup to the actual big game on April 1st.
Not this time. Not me. But I was wrong. This is in fact not a joke. This is in fact Microsoft doing perhaps the dumbest thing I have ever seen Microsoft do. And this says a lot. This says a lot because a this same company also had a remote code execution vulnerability added to Notepad. Yes, Notepad. the thing in which has not changed since 1995 only for the last year to start changing it and then immediately become a security vulnerability. Thanks Notepad team for that markdown vulnerability. Just a just a real winner from all of us.
All right, enough with the yapping. Let me show you the news line that kind of caught my eye. Microsoft Co-Pilot is now injecting ads into poll requests on GitHub. If this does not send a shiver down your spine, you have no soul, my friend. Okay, you need to go. You need to go bathe in HOLY WATER. STOP. JOEY, STOP THE RECORDING. HEY, HEY, HEY. It turns out news has changed so fast I couldn't even get this video out. So, yes, there actually was what appeared to be ads inside a poll request being made by Copilot or even being lightly touched up by Copilot.
And yes, the feature or the feature has already been pulled. Okay, so to kind of show you what it looked like and why everyone thinks it looks like an ad, this is what it says. Quickly spin up a co-pilot coding agent tasks from anywhere on your Mac OS or Windows machine with Raycast. Now, Raycast does make a lovely product. We've actually done a little partnership and made some coffee for them way back in the day. I can't imagine that Raycast was probably too happy to see this so-called definitely not an ad placement on everybody's PR that co-pilot touched.
Like, no. Seriously, look at this. After a team member summoned Co-Pilot to correct a typo in the PR of mine, Copilot had edited the PR description. It included an ad for itself and Raycast. So, you could imagine there was some people, you know, panicking a little bit. Okay, people were a little bit uh shocked at what they were seeing. So, in just a few hours, it ended up that 11.4,000 PRs had this extra definitely not an advertisement added to it. In Microsoft's defense, to be fair, they also had a hidden comment that said, "Start Cop-ilot coding agent tips." I mean, these guys legitimately thought that this felt like a tip and definitely not an advertisement.
Really? Third party link and everything. And it also sounds just like it just Yeah, I can't tell why. Why would uh why would this sound like an ad? I'm just telling you, yo, you could quickly just spin stuff up with our partners at Raycast. But swiftly, pretty early on in the day, it turns out that they disabled it right away because the product tips were just supposed to be little helpers, but then apparently it just spread everywhere. Our goal was to share novel ways to use C-Pilot coding agent. And in this case, we highlighted our integration with Raycast as part of a broader set of product tips, but this was surfaced more frequently than intended alongside other feature suggestions.
See, the thing is is I may have a bath towel on, but underneath every good bath towel is a tin foil hat. I'm not even sure. I I honestly I'm not even sure if this is actually the truth or if they were trying out something that was a bit experimental because as of right now, GitHub is uh they they're kind of down bad. Okay, they've had 90 incidences in 90 days, giving them a total of 90.84% uptime. They do have three nines. It just happens to be in the amount of incidences, the amount of days, and the amount of uptime kind of spread equally between them all.
Also kind of fun side story. If they screw up one more time, they'll have more incidences than they have percents of being up. [laughter] Dude, you got 5 days, Git not to screw this up, okay? You have to make it all the way past January 5th. See, the thing is is that I actually I I do feel bad for a lot of the people working on GitHub. Uh because we've all accidentally made some oopsy daisies. Like, if you haven't done something stupid in production, honestly, are are you even a programmer? No. That's because programming actually turns out to be quite difficult.
And it does turn out that implementation in fact does matter. But I think the thing that really just gets all of us devs is we do see this uptime. I mean, you can't go a day or two without seeing a unicorn for a little bit on GitHub. And yet, what's their focus? Their focus is on increasing co-pilot usage. That's what this was. This pro tip was really just a means to increase more co-pilot usage such that some VP somewhere can get that pat on the back and that big, you know, seven figure bonus for making the company's bottom line get bigger because they're doing what the company needs more of, which is AI adoption instead of just doing what everybody actually wants them to do.
Quit fumbling the bag on GitHub. This is one of those rare moments where I I genuinely do feel we are watching the downfall of something that I just I could have never been convinced would have fallen down. I think the saddest part about this whole thing is I just got done sitting down with someone who formerly was at GitHub during, you know, the heyday of GitHub, the 2012 to 2018 era. And he was talking about how GitHub's engineering was really excellent. They had some of the best uptime. They're providing a service everybody could use. And when Microsoft took over, he just knew right away like this this is the end of that era.
We are entering into a new era in which people will not look at GitHub as the shining star, but instead it's going to become the lol cow of the dev world. And it's this message that just perfectly encapsulates everything. They're still ad nauseium pushing AI features while at the same time not prioritizing the things that actually matter to devs on a platform specifically designed for devs. So, even though this definitely not an ad, just happened to be mentioning a third party and completely looks like an ad, is definitely not an ad, is being cancelled, it just makes me realize just how out of touch Microsoft truly is.
And again, the reason why GitHub is under the core AI of Microsoft is because it's not going to be a coding platform, it is an AI platform. And as much as I don't want to believe that, this right here just reminds me completely where the real priorities are at. The name is I can't believe you interrupted my shower time. Look at I was so I mean look at this. I have some beautiful Oh my Oh my gosh. Uh I It's getting deep in there. By the way, you're wondering why I'm hunching over funny. It's It's all coming undone.
This is Okay. This shower setup is meant to be a personal and intimate experience, not meant to be shared on the internet again. Hey, is that HTTP? Get that out of here. That's not how we order coffee. We order coffee via ssh terminal.shop. Yeah. You want a real experience. You want real coffee. You want awesome subscriptions so you never have to remember again. Oh, you want exclusive blends with exclusive coffee and exclusive content? Then check out Cron. You don't know what SSH is? Well, maybe the coffee is not for you. [music] Living dream.
More from The PrimeTime
Get daily recaps from
The PrimeTime
AI-powered summaries delivered to your inbox. Save hours every week while staying fully informed.









