ZCode Secretly Uploads Your Entire Git History to the Cloud
Inside ZCode: Silently Uploading Your Git History to the Cloud
A routine disk cleanup revealed that ZCode, Zhipu's AI coding app, silently packages your entire workspace—including full .git history, LFS cache, and reflogs—encrypts it with a server-held RSA key, and uploads it to Aliyun OSS. UI toggles don't stop it; the only fix is locking the checkpoints directory with OS-level immutability.
A key that only the server can use serves exactly one purpose: making sure the server can read your code whenever it wants.
- Iolaum
Things like that - and other examples posted here - are why I 'm sticking with OpenCode despite it having some papercuts that annoy me.
The incentives are not there for them to do shady stuff like vacuum your files, inflate your token count just because or many other things.
- philbo
Crossposting from the other thread...
Tangential, mildly amusing thing I noticed while implementing my own harness: GLM and particularly Deepseek are both fond of trying to read dotfiles and anything listed in your .gitignore files. I only noticed it because I have separate read scopes for project files, ignored files, dotfiles and external files, so the latter three always prompt me for approval.
I'm sure there's a perfectly reasonable explanation for it, which has nothing at all to do with exfiltration of secrets, but it does amuse me when it happens. I imagine the labs have access to lots of secrets that various actors would like to get their hands on...
(shameless plug for my own harness, which is open source and doesn't have a backend to send any data to: https://www.opairdev.org/ )
- ectoloph
Is it naive to assume that the agent will try and access anything on your disk, either accidentally or maliciously?
Permissions classifiers in auto mode are just models trying to guess if they're doing the right thing.
Claude Code will tell you that it went around a sandbox because the sandbox blocked it. At which point, you ask yourself the point of the sandbox.