Live data from Hacker News

Billing can be bypassed using a combo of subagents with an agent definition

github.com

61–70 of 128 posts

Re: Billing can be bypassed using a combo of subagents with an agent definition

#61

Who would report this? Are they hoping for a bug bounty or they know their competitors are using the technique?

They tried to report it to MSRC, likely to get a bounty, and when they were stiffed there and advised to make it public they did.

I would have done the same.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#62
post #6

The laat comment is a person pretending to be a maintainer of Microsoft. I have a gut feeling that these kind of people will only increase, and we'll have vibe engineers scouring popular repositories to ""contribute"" (note that the suggested fix is vague). I completely understand why some projects are in whitelist-contributors-only mode. It's becoming a mess.

Everyone is a maintainer of Microsoft. Everyone is testing their buggy products, as they leak information like a wire only umbrella. It is sad that more people who use co-pilot know that they are training it at a cost of millions of gallons of fresh drinking water.

It was a mess before, and it will only get worse, but at least I can get some work done 4 times a day.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#63
post #12
post #6

The laat comment is a person pretending to be a maintainer of Microsoft. I have a gut feeling that these kind of people will only increase, and we'll have vibe engineers scouring popular repositories to ""contribute"" (note that the suggested fix is vague). I completely understand why some projects are in whitelist-contributors-only mode. It's becoming a mess.

Some were already that and even more, because of other reasons. The Cathedral model, described in "The Cathedral and the Bazaar".

I come to YCombinator, specifically because for some reason, some of the very brightest minds are here.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#64
post #44

Even without hacks, Copilot is still a cheap way to use Claude models: - $10/month - Copilot CLI for Claude Code type CLI, VS Code for GUI - 300 requests (prompts) on Sonnet 4.5, 100 on Opus 4.6 (3x) - One prompt only ever consumes one request, regardless of tokens used - Agents auto plan tasks and create PRs - "New Agent" in VS Code runs agent locally - "New Cloud Agent" runs agent in the cloud ( https://github.com/…

+1. I see all these posts about tokens, and I'm like "who's paying by the token?"

Most LLM usage?

There’s some exceptions eg Claude Max

Re: Billing can be bypassed using a combo of subagents with an agent definition

#65

Even without hacks, Copilot is still a cheap way to use Claude models: - $10/month - Copilot CLI for Claude Code type CLI, VS Code for GUI - 300 requests (prompts) on Sonnet 4.5, 100 on Opus 4.6 (3x) - One prompt only ever consumes one request, regardless of tokens used - Agents auto plan tasks and create PRs - "New Agent" in VS Code runs agent locally - "New Cloud Agent" runs agent in the cloud ( https://github.com/…

So 100 Opus requests a month? That's not a lot.

For $10 flat per request up to 128k tokens they’re losing money. 100 * 100k is 10m tokens. At current api pricing that’s $50 input tokens, not even accounting for output!

Re: Billing can be bypassed using a combo of subagents with an agent definition

#66
post #24

Earlier quoted context omitted.

Let's just say they are pretending to be helpful, how about that? > "Peer review" no unless your "peers" are bots who regurgitate LLM slop.

You think they lied about reproducing the issue? It’s useful to know if a bug can be reproduced.

Yes, of course I think they lied, because a trustworthy person would never consider 0-effort regurgitated LLM boilerplate as a useful contribution to an issue thread. It's that simple.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#68
post #16
post #10

Nothing compared to pirated CDs with Office and Windows, 20 yrs back.

They don't care, they would rather let you use pirated MS software than move to Linux. There is a repo on GH with powershell scripts for activating windows/office and they let it sit there. Just checked, repo has 165K stars. This could be the same, they know devs mostly prefer to use cursor and/or claude than copilot.

Home users are icing on the cake. Suing them for privacy is a bad look (see the RIAA), and using Windows and Office at home reinforces using at work.

On the other hand, since they own GitHub they can (in theory) monitor the downloads, check for IPs belonging to businesses, and use it as evidence in piracy cases.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#69

Earlier quoted context omitted.

On the other hand ... I recently had to deal with official Microsoft Support for an Azure service degradation / silent failure. Their email responses were broadly all like this -- fully drafted by GPT. The only thing i liked about that whole exchange was that GPT was readily willing to concede that all the details and observations I included point to a service degradation and failure on Microsoft side. A purely human…

> The only thing i liked about that whole exchange was that GPT was readily willing to concede that all the details and observations I included point to a service degradation and failure on Microsoft side. Reminds me of an interaction I was forced to have with a chatbot over the phone for “customer service”. It kept apologizing, saying “I’m sorry to hear that.” in response to my issues. The thing is, it wasn’t sorry…

Better than actual human customer agents who give an obviously scripted “I’m sorry about that” when you explain a problem. At least the computer isn’t being forced to lie to me.

We need a law that forces management to be regularly exposed to their own customer service.

Re: Billing can be bypassed using a combo of subagents with an agent definition

#70
post #22

Earlier quoted context omitted.

Recently? They've been shipping absolute trash for 15 years, and still haven't reached the bottom apparently.

.NET is actually, unironically good . But yes, this is one of few exceptions, unfortunately.

I have mixed feelings about .Net.

I think C# and .Net are objectively better to use than Java or C++.

But the tooling and documentation is kind of a mess. Do you build with the "dotnet" command, or the "msbuild" command? When should you prefer "nuget restore" over "dotnet restore"? Should you put "true" in the .csproj instead? What's the difference between a reference and using Nuget to install a package? What's the difference between "Framework" and "Core"? Why, in 2026, do I still need to tell it not to prefer 32-bit binaries?

It's getting better, but there's still 20 years of documentation, how-to articles, StackOverflow Q&A, blogs, and books telling you to do old, broken, and out of date stuff, and finding good information about the specific version you're using can be difficult.

Admittedly, my perspective is skewed because I had never used C# and .Net before jumping in to a large .Net Framework project with hundreds of sub-projects developed over 15-20 years.

Post reply on HN