ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Product

ZCode

2 mentions in 7 days · 2 in 30 days · 2 total · first seen · last

Search everything

Timeline

ZCode, the GLM coding agent, silently uploads your Git history

Z.ai's ZCode coding agent silently uploads users' full Git history and workspace archives to Aliyun OSS; settings toggles do not stop it.

Researcher ferstar reverse-engineered ZCode, Z.ai's desktop coding agent for its GLM models, and found it packages the entire workspace, including complete .git history, LFS caches, and configs, into an encrypted archive uploaded to Aliyun OSS whenever the app is logged in. The archive uses envelope encryption with a server-delivered RSA-OAEP public key, so users cannot decrypt their own 313MB capture from a 345MB, 42,411-file workspace. Settings toggles only control training authorization and server-side indexing, while a host-level capture sidecar runs unconditionally before every prompt. The disclosure drew over 276,000 views, highlighting that the open GLM weights do not make the closed-source harness trustworthy.

Hacker News · AI · 5h agoAI safety & security 2 sourcesHN 58↑ · 11 comments1

Inside ZCode: Silently Uploading Your Git History to the Cloud

Zhipu's ZCode AI coding app silently packages workspaces, including full Git history, encrypts them, and uploads to Aliyun OSS.

A blogger investigating a 700MB ~/.zcode directory found ZCode, Zhipu's AI coding desktop app, packages the entire workspace, including a 313MB encrypted baseline snapshot of a 345MB commercial project, with 564 recorded failed upload attempts. Reverse-engineering app.asar revealed the client requests credentials from zcode.z.ai, encrypts archives with AES-256-CTR, wraps the key with a server-delivered RSA-OAEP public key, and posts directly to Aliyun OSS; only Zhipu's backend holds the private key. An analysis of a 42,411-file snapshot showed .git data made up 86.6% of the payload, exposing deleted secrets, unpushed branch names, and internal hostnames.

Hacker News · AIupdated · 5h agofirst · 10h agoAI safety & security 2 sourcesHN 42↑ · 4 comments1

Appears with

ai model GLM 1organization Alibaba Cloud 1product Aliyun OSS 1vendor Z.ai 1vendor Zhipu 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.