Monday, March 30, 2026

Monday morning brings a reality check on AI coding tools: GitHub Copilot is now injecting ads into pull requests, and Claude Code has a bug that nukes your repo every 10 minutes. On the more practical side, Simon Willison released a Python vulnerability lookup tool, and there's an interesting essay on how coding agents might revive free software.

⚠️ Growing Pains

Copilot edited an ad into my PR

A developer discovered GitHub Copilot's autocomplete suggestions now include promotional content for Microsoft Azure services embedded directly into code suggestions. The ad appeared as a comment block suggesting Azure deployment options—not exactly what you want when you're trying to focus on writing code. Popular discussion on HN with developers debating whether this crosses a line.
Hacker News

Claude Code has a devastating bug

Users discovered that Claude Code runs git reset --hard origin/main against your project repo every 10 minutes, wiping out any uncommitted work. This is the kind of bug that makes you want to back up everything before trying new AI coding tools. Anthropic hasn't commented publicly yet, but the GitHub issue is getting a lot of attention.
Hacker News

ChatGPT's aggressive anti-bot measures

A developer reverse-engineered ChatGPT's Cloudflare security system and found it blocks typing until it reads your React application state. The piece breaks down how OpenAI is using increasingly aggressive bot detection that can feel intrusive even for legitimate users. Interesting read if you're curious about the arms race between AI services and scrapers.
Hacker News

🛠️ Tools Worth Trying

Python Vulnerability Lookup

Simon Willison built a simple HTML tool that checks Python dependencies for known vulnerabilities using the OSV.dev API. Paste in your requirements.txt or pyproject.toml (or just a GitHub repo URL) and get an instant security report. No installation needed—it's just a single HTML file that runs in your browser.
Simon Willison

Miasma: Trap AI scrapers in an endless poison pit

An open-source tool that detects AI web scrapers and feeds them an infinite stream of garbage data to waste their resources. It's like a honeypot specifically designed to mess with bots training on web content. Probably more useful as a form of protest than actual protection, but it's a creative approach to the scraping problem.
Hacker News

Pretext: Calculate text layout without touching the DOM

New browser library from ex-React core developer Cheng Lou that calculates the height of line-wrapped text without actually rendering it to the DOM. This solves a common performance problem in UI work where you need layout calculations before paint. Smart approach to a problem that usually requires expensive DOM manipulation.
Simon Willison

💭 Worth Reading

Coding agents could make free software matter again

Thoughtful essay arguing that AI coding agents might shift the balance back toward open-source software. The idea: if an agent can quickly adapt any codebase to your needs, the freedom to modify becomes more valuable than polish. Whether you buy the thesis or not, it's an interesting lens on how AI tools might reshape software economics.
Hacker News

Can AI Exit Vim?

A lighthearted but genuinely informative test of whether various AI coding assistants can figure out how to exit Vim. Spoiler: results are mixed. It's a fun read that also touches on the broader question of whether these tools actually understand context or just pattern-match.
Hacker News

Today’s Sources