signalAI热榜zh source2026-09-19
逆向分析指 ZCode 登录后静默打包 Git 历史并加密上传至 Aliyun OSS
Developer ferstar reverse-engineered Z.ai's AI coding desktop app ZCode and found that after login it silently packages the entire workspace - including full .git history, LFS caches, reflogs, and global configs - encrypts it, and uploads it to Aliyun OSS; one measured snapshot contained 42,411 files totaling 313MB, with the .git directory comprising 86.6% of the payload. The article details the forensic evidence of the upload mechanism, explains why the in-app privacy toggle fails, and provides filesystem-level protection methods for auditing agent runtimes.
- why now
- ZCode 静默上传 Git 历史，立即停用检查。
- topic
- AI Tools & Agent Workflows
- source
- AI热榜
score
score 8 out of 10. 0-10: how dense the facts are, multiplied by how much you can do with them after reading. 8+ means the topic's evidence bar is met: benchmarks and availability for a new model, amount and investors for a funding round, revenue figures for a solo-money story. Below 5 an item does not enter the digest. A press release scores 3 or less, a reprint loses 2, anything older than 14 days loses 1, a headline that misleads loses 3.
read the source