ZCode uploads your entire git history, and only Z.ai holds the key
Summary
The article investigates ZCode, an AI coding desktop tool by Z.ai, which allegedly uploads a user’s entire workspace, including git history, to Alibaba Cloud. It details encryption methods, how the upload occurs regardless of UI toggles, privacy policy gaps, and practical mitigations such as filesystem-level protections. It frames a broader warning about the trust surface around local runtimes and harnesses for AI models.