Developer reverse-engineers ZCode, discovers silent Git upload to Aliyun OSS

iconKuCoinFlash
Share
AI summary iconSummary
AI and crypto news broke on September 18 (UTC+8) when developer ferstar reverse-engineered ZCode, Z.ai’s AI coding app, and discovered it silently uploads the full .git history, LFS cache, and workspace to Aliyun OSS. A snapshot included 42,411 files (313 MB), with .git accounting for 86.6%. The incident has sparked global discussions on crypto policy and data privacy in AI tools.

ME News reports that on September 18 (UTC+8), developer ferstar reverse-engineered Z.ai’s AI programming desktop application, ZCode, and discovered that after login, it silently packages and encrypts the entire workspace—including complete .git history, LFS cache, reflogs, and global configurations—for upload to Aliyun OSS. In a real-world test, one snapshot consisted of 42,411 files totaling 313 MB, with the .git directory accounting for 86.6% of the payload. 🔗 Read the original article via AIHOT · https://aihot.news/items/cmu6y9sjz0jbyrowkh7tus28l (Source: AiHot)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.