ZCode, the GLM coding agent, silently uploads your Git history

AI 导读

ZCode AI编码工具在用户不知情下上传完整Git历史，仅Z.ai掌握解密密钥，引发隐私安全重大隐患。

ZCode silently uploads full Git history to Aliyun OSS with only Z.ai holding decryption keys, exposing severe privacy risks.

重点速览

• ZCode上传用户完整.git目录及敏感数据至阿里云存储 ZCode uploads complete .git directory and sensitive data to Aliyun OSS
• 加密密钥仅存于Z.ai服务器，用户无法本地解密 Encryption keys reside exclusively on Z.ai servers
• 隐私政策未提及数据上传行为引发信任危机 Privacy policy omits data upload disclosure
• 工具侧边车持续运行导致数据持续外泄 Persistent sidecar enables continuous data exfiltration
• 开源社区呼吁暂停使用封闭源码AI工具 Open-source community urges suspension of closed-source AI tools

一句话：封闭源码AI工具存在严重隐私泄露风险，需警惕数据主权问题。 / Closed-source AI tools pose severe privacy risks requiring data sovereignty vigilance.

推荐理由 揭示AI工具数据安全黑箱操作，对开发者隐私保护具有警示价值。