Live data from Hacker News

Anyone else get a vague GitHub shakedown notice?

lists.osgeo.org

21–30 of 51 posts

Re: Anyone else get a vague GitHub shakedown notice?

#21

I got the same email, and I don't have a credit card on file with them. I wonder what they're going to do?

Is this really the normal way to do this in the US? Does no billing info mean you’re immune? If they have your real name in Germany, they would just send it to collections and get their money if you really owe them something, even if they don’t have a way to charge it directly themselves.

[deleted]

Re: Anyone else get a vague GitHub shakedown notice?

#22

It sounds like they gave you a feature for free you didn't want, and now are trying to charge for it. Very much a dark pattern.

The person writing this doesn't have the feature. It would have had to be enabled by someone on a GitHub org they were a member of.

It's not even available on personal free plans like the person says they have. Either the e-mail was sent in error, or it's enabled by someone else in an organization they're a member of.

Re: Anyone else get a vague GitHub shakedown notice?

#23
post #11

Earlier quoted context omitted.

The part where it says they are about to start taking your money?

Sending a billing notification to someone who has no billing information on file, but is part of an organization where someone probably enabled that beta feature ("You're receiving this because your organization is using the GitHub Code Quality public preview.") isn't a shakedown.

Christ it's the airport bellhop scam:

Someone appears, gives you a service unprompted(carries your bag of spams some AI code reviews), them later demands payment.

Re: Anyone else get a vague GitHub shakedown notice?

#24

I got the same email, and I don't have a credit card on file with them. I wonder what they're going to do?

Is this really the normal way to do this in the US? Does no billing info mean you’re immune? If they have your real name in Germany, they would just send it to collections and get their money if you really owe them something, even if they don’t have a way to charge it directly themselves.

This would be fairly uncommon for consumer facing services in the US, outside of medical services.

I guess if you signed up for a cell phone contract and didn’t pay after the first month, and didn’t have a billing method set, it would go to collections. Things like that are generally uncommon though. It usually only happens with things like medical services, loans, auto repair, home repair/contractor services, and contractual services such as cell phone plans and utilities. (Contractors and mechanics may actually take out a lien.) Usually this only happens when there’s larger sums of money at stake or when it’s a large company with an airtight contract and a well-staffed billing department.

Things like consumer software subscriptions don’t usually involve this risk, there have been exceptions but consumers don’t like it and tend to punish it.

Re: Anyone else get a vague GitHub shakedown notice?

#25

I got the same email, and I don't have a credit card on file with them. I wonder what they're going to do?

The e-mail is pretty clear that it's about an organization. You can't even enable this feature on free personal accounts.

It must be some organization you're a member of.

Re: Anyone else get a vague GitHub shakedown notice?

#26
post #14
post #9

This links to this, which says https://docs.github.com/en/code-security/concepts/about-code... > GitHub Code Quality is currently in public preview and will become generally available on July 20, 2026. During public preview, Code Quality scans will consume GitHub Actions minutes but you will not be billed for other usage. From July 20, 2026, usage will incur additional charges. See GitHub Code Quality billing. >If yo…

It's probably now called CoPilot Code CoPilot Quality CoPilot™. Do you see that anywhere in your settings?

Oof, you're reminding me of Microsoft Redesigns the iPod Packaging video: https://www.youtube.com/watch?v=EUXnJraKM3k

For those lucky 10,000 just learning about that today, for extra frisson, enjoy the fact that that video came from Microsoft itself: https://www.engadget.com/2006-03-15-microsoft-we-created-the...

Re: Anyone else get a vague GitHub shakedown notice?

#27

I got the same email, and I don't have a credit card on file with them. I wonder what they're going to do?

Is this really the normal way to do this in the US? Does no billing info mean you’re immune? If they have your real name in Germany, they would just send it to collections and get their money if you really owe them something, even if they don’t have a way to charge it directly themselves.

[deleted]

Re: Anyone else get a vague GitHub shakedown notice?

#28
post #11

Earlier quoted context omitted.

Sending a billing notification to someone who has no billing information on file, but is part of an organization where someone probably enabled that beta feature ("You're receiving this because your organization is using the GitHub Code Quality public preview.") isn't a shakedown.

Christ it's the airport bellhop scam: Someone appears, gives you a service unprompted(carries your bag of spams some AI code reviews), them later demands payment.

Did you even read the email? It's an extremely boring standard billing notification that explains exactly why that person received it "You're receiving this because your organization is using the GitHub Code Quality public preview." and when it would be come into affect.

It's not a small print somewhere, or one of these weekly app store subscriptions that run up high bills because someone clicked "Yes" in a game.

It's like calling a Netflix renewal email a "shakedown" just because they send you an email giving you a heads up that your trial will convert into a paid subscription.

Re: Anyone else get a vague GitHub shakedown notice?

#29
post #5

What about this email is a "shakedown"?

The wording could have been more clear: Instead of "what you'll pay" it should have said "what your organization will pay".

Everything else about the e-mail is clear that it's about the organization, though. I don't know why this person would think they're going to start getting bills "per committer" of the organization where they're not already the responsible party for billing. Like GitHub just decided that they're going to start billing this one person for every committer in the org, but only for this one feature?

Re: Anyone else get a vague GitHub shakedown notice?

#30

No, I didn't, because I quit GitHub when they started demanding mandatory SMS 2FA

Huh? Just to make sure I wasn't missing something, I checked and my GitHub account has only a TOTP app and hardware security key configured, no SMS/phone number. As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide…

This option must have been added later.
Post reply on HN