Live data from Hacker News

Tell HN: YC companies scrape GitHub activity, send spam emails to users

news.ycombinator.com

201–210 of 278 posts

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#201

Earlier quoted context omitted.

That they use some of their trillion dollar marketshare to solve it, why are you acting like this is a hard problem? It's not. They're just too cheap and greedy to do anything about it.

Trillion dollar marketshare? How big do you think GitHub is?

How small do you think Microsoft is??!

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#203

Martin from GitHub here. This type of behaviour is explicitly against the GitHub terms of service, when we catch the accounts doing this we can (and do) take action against those accounts including banning the accounts. It's a game of whack-a-mole for sure, and it's not just start-ups that take part in this sketchy behaviour to be honest. I've been plenty of examples in my time across the board. The fundamental natur…

> when we catch the accounts doing this we can (and do) take action against those accounts including banning the accounts. This isn't my experience. I requested that you looked into a spammer in July 2025, you ignored my reply and the account is still active. ---- Thank you so much for the report. We're sorry to hear you're receiving unwanted emails, but it's always a possibility when your public contact information…

It's impossible for them to stop if you list your email on there. They could make it harder of course. But if you put your email out there for a human to find, then a script or bot or also find it.

And yes of course they can also stop a specific spammer. But that spammer may pick up another account and email.

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#204
post #19

Email address privacy is a feature offered by Github and replaces your day to day email: https://docs.github.com/en/account-and-profile/how-tos/email...

Unfortunately if you don't start out using that, then your email address is already spread across the web. And back when I was looking at gitlab/bitbucket/etc for feature comparison, each forge used their own domain and couldn't be persuaded to combine commits from multiple addresses into your own profile (to be clear, that's not really necessary, but it does make it more difficult to find a commit created by someone when their commit address isn't the address associated with their account)

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#206
Even worse, I got contacted through YC Jobs (workatastartup.com) with a message that was basically: "Star, fork, and submit PRs to our open-source repo and we'll review you for a contract."

I immediately realize it's engagement farming + free labor. I said "No thanks."

Got this reply: "(...) I'm looking forward to reviewing your PRs. Feel free to share me any of your questions. (...)"

Apparently, no one read my reply - not even AI. They are automating this shit. It's sad that many fall for it (check their Github repo)

---

Company: Aden (W20)

Contact: Vincent Jiang, Founder

Github: https://github.com/aden-hive/hive

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#207
post #203

Earlier quoted context omitted.

> when we catch the accounts doing this we can (and do) take action against those accounts including banning the accounts. This isn't my experience. I requested that you looked into a spammer in July 2025, you ignored my reply and the account is still active. ---- Thank you so much for the report. We're sorry to hear you're receiving unwanted emails, but it's always a possibility when your public contact information…

It's impossible for them to stop if you list your email on there. They could make it harder of course. But if you put your email out there for a human to find, then a script or bot or also find it. And yes of course they can also stop a specific spammer. But that spammer may pick up another account and email.

The grandparent post wasn't asking for them to do the impossible and stop all spamming, only to take action against the particular user that spammed them.

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#208
post #128

Earlier quoted context omitted.

What was happening with this account? I was often seeing popular but empty (only title of the paper and maybe a short readme) repositories that were created directly after a paper was published?

Just part of the process - he'd queue up the projects as interesting things came in, then plow through. Usually he'd have a rough framework within a day or two, and then a working proof of concept within a week, and then return to the most promising, useful, or interesting projects.

I really appreciated his coding-style, but the bar is quite low on research/ML-algorithms to be fair. I still wonder how he managed to get „trending“ repositories regularly despite the repositories being empty.

Re: Tell HN: YC companies scrape GitHub activity, send spam emails to users

#209
I find it interesting that a substantial number of people seem to think it's wrong or unethical to cold-email someone about a potential recruitment or business opportunity if they post their email in a public place, such as commits in a public Github repo.

I feel like if you don't want companies to cold-email you, you shouldn't make your email public. Github provides noreply email addresses for this purpose.

Post reply on HN