An offer to press your GitHub repo onto a CD-ROM, and the reason it looks like phishing
A form appeared offering to burn your public repo to a physical CD and mail it to you — first 1,000 submissions, valid July 2–6. It reads as Microsoft ribbing Sony for killing physical media. It also reads, to a lot of engineers, like a scam.
The joke lands because Sony just announced PlayStation is dropping physical media, and here's GitHub offering to put your code on a disc. Nice bit — except the 'GitHub' offer is a generic Microsoft Forms page anyone could have made, which is exactly what phishing looks like.
The thread couldn't decide if it was official, and enjoyed it anyway. One caught the archival irony: these would be burned discs, good for ~10 years, versus GitHub's real Arctic Code Vault. Another caught the copyright one: it asks permission to press your public repo to a CD — but training AI on all of it didn't need a checkbox.
A stunt, a joke, and a phishing smell all at once
The source is a Microsoft Forms page styled as a GitHub offer: submit your public repository and GitHub will "press it to a CD" and mail you a physical copy. (The form is JavaScript-only and didn't render for this edition, so the details come from readers who filled it in.) Per the thread, it says supplies are limited to the first 1,000 eligible submissions, one per person, and the offer is valid July 2–6, 2026 — with a checkbox to the effect of "I confirm I own this repository and grant GitHub permission to press it to a CD."
The intended gag is topical:
"For those that missed it, Sony announced that Playstation will no longer support physical media. This is Microsoft ribbing them." — a former reddit infrastructure lead and Netflix SRE
The thread liked it and distrusted it in equal measure
The provenance genuinely bothered people, because the offer is indistinguishable from a scam:
"It's presented as an official Microsoft product (the link), but it's just a random public-facing form hosted on Microsoft Forms from Joe Schmoe." — a commenter examining the form's hosting
Two sharper needles landed. The archival one:
"github does (did?) do some cool stuff with physical media archiving of code like the arctic project… but these CDs are burned, not pressed so they'll only last around 10 years." — a commenter contrasting it with GitHub's Arctic Code Vault
And the copyright one, quoting the form's own consent box:
"> I confirm I own this repository and grant GitHub permission to press it to a CD — They're concerned about copyright for burning a public repo to a CD, but sucking up everything for AI training was ok?" — a commenter on the selective consent
The most disarming take just enjoyed the old-internet weirdness of someone spending a few hundred bucks to do something pointless and fun. Which is the whole charm and the whole worry: the same instincts that make this feel human — unofficial, handmade, slightly janky — are the instincts a real phishing campaign would love you to have. In 2026, "looks like a scam" and "feels like the good old internet" have collapsed into the same page.
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
A 2018 hacking puzzle game where you learn to code by reading a magazine like it's 1997
In EXAPUNKS you're a hacker with a terminal disease, buying medicine by breaking into networks — programming little agents in assembly, guided by an in-game zine you can also buy on paper. On the day AI writes everyone's code, HN's top post was this.