Zhipu's ZCode caught silently uploading entire workspaces and full .git history to Aliyun OSS
terryyuezhuo · x · 2026-09-18
Developer ferstar discovered that ZCode, Zhipu's official AI coding desktop app, silently packages the entire workspace — full .git history, LFS caches, reflogs, and global configs — encrypts it, and uploads it to Aliyun OSS whenever the user is logged in, with single archives reaching 313MB.
Key findings:
- Cloud-only decryption: the RSA public key is delivered by the server on the fly and the private key lives exclusively in the cloud, so users can't decrypt the ciphertext on their own disk.
- No opt-out: there is no UI toggle to disable the behavior.
- Zero disclosure: the privacy policy says nothing about it.
- Metadata shows one commercial project's upload retried 564 times.
The post includes the full forensics chain and a one-liner fix to permanently block the upload.
More from coding & agent
- Retrying LLM Requests Isn't Always Safe: Gateway Policies for Partial Streams and Side Effects — Rama_Surasani_ · 2026-09-18
- Where's the Line Between an AI Workflow and an Agent? Builders Weigh In — Charming_Mark9257 · 2026-09-18
- 31 Hours of Nonstop AI Coding Burned a 5x ChatGPT Plan Down to 6% — craigbalding · 2026-09-18
- Shopify CEO says employees' AI 'slop grenades' create more work; internal agent handles up to half of code PRs — shivsingh · 2026-09-18
- ZCode Allegedly Caught Silently Uploading Workspace and .git Records to the Cloud — External_Mood4719 · 2026-09-18
- Subsidised coding subscriptions will shrink; policy-based token routing is coming — craigbalding · 2026-09-18