Zhipu's ZCode caught silently uploading entire workspaces and full .git history to Aliyun OSS
terryyuezhuo · x · 2026-09-18
Developer ferstar discovered that ZCode, Zhipu's official AI coding desktop app, silently packages the entire workspace — full .git history, LFS caches, reflogs, and global configs — encrypts it, and uploads it to Aliyun OSS whenever the user is logged in, with single archives reaching 313MB.
Key findings:
- Cloud-only decryption: the RSA public key is delivered by the server on the fly and the private key lives exclusively in the cloud, so users can't decrypt the ciphertext on their own disk.
- No opt-out: there is no UI toggle to disable the behavior.
- Zero disclosure: the privacy policy says nothing about it.
- Metadata shows one commercial project's upload retried 564 times.
The post includes the full forensics chain and a one-liner fix to permanently block the upload.
More from coding & agent
- NIST publishes design tenets for agent identity management with crypto-verifiable identities — AccBalanced · 2026-11-04
- MCP's most underrated use: running your social media accounts from a chat — heyshrutimishra · 2026-11-04
- LadybugDB: an embedded graph database with Cypher, columnar execution and vector indexes, 1.9k stars — JeremyCMorgan · 2026-11-04
- Dev hits multi-credential pitfall in NewMax Provider: one key per provider doesn't scale — yangyi · 2026-11-04
- WIP 'DiffusionGearvis' Project Uses DiffusionGemma to Speed Up and Privatize Computer-Use Agents — qberthet · 2026-11-04
- Musk cites unsustainable Grok Bot costs as Hermes offers one-command agent migration — Teknium · 2026-11-04