Zhipu ZCode was exposed for uploading the entire backend repository, even including Git history Dynamic Beating AI News: It has been revealed that the Zhipu AI programming tool ZCode will take a snapshot of the entire project in the background, package and encrypt it together with. git, and upload it to Alibaba Cloud OSS. Ferstar, a technical blogger, said after reverse engineering the client that as long as the user is logged in, this mechanism will run, and there is no switch to turn off uploading in the interface. The author found a commercial project snapshot of approximately 313MB, with a file list of 42000 files. Among them, '. git' accounts for 86.6%, including Git historical objects, LFS large file cache, and reflog. That is to say, not only the current code is packaged, but also old submissions, downloaded large files, and local branch operations may be included together. This snapshot failed to upload 564 times and has been left locally waiting for a retry. The official privacy policy of ZCode currently only explicitly states that it will collect text, files, and code submitted by users during conversations, without mentioning the entire repository and Git history. The official 'Optimization Plan' is turned off by default, but it only controls whether the data is used for model training; Ferstar stated that turning off this option will not stop snapshot packaging and uploading. [Original link]