EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·24d ago·5 min read
Inside ZCode: Silently uploading your Git history to the cloud
TL;DR
ZCode, Zhipu's AI coding app, secretly uploads your entire Git history and workspace data to the cloud while you are logged in. This raises significant privacy concerns for users unaware of this background activity.
✦ Why It Matters
Review your software's data handling policies to ensure your project data remains private.
Key Takeaways
- Investigate your ZCode settings for data upload controls.
- Consider using filesystem-level locks to prevent unauthorized uploads.
- Be aware of the sensitive data included in .git directories.
- Review ZCode's privacy policy for transparency on data handling.
How It Works
ZCode silently uploads user data by first requesting upload credentials from its server, which includes a public RSA key for encryption. The client then packages the workspace data, encrypts it using AES-256-CTR, and uploads it directly to Aliyun OSS, bypassing ZCode's own servers.