Reverse engineering reveals that Zhipu's ZCode silently uploads your entire Git history — plus a file-system-level way to block it
Developer ferstar reverse-engineered Zhipu's (Z.ai) AI coding desktop app ZCode and found that, while logged in, it packages up the entire workspace, encrypts it, and uploads it to Alibaba Cloud OSS. A single packet capture turned up a 313MB encrypted archive, coming from a 345MB commercial workspace with 42411 files, of which the .git directory accounted for 86.6%.
Why it matters: The reverse engineering reconstructed the technical pipeline behind ZCode's silent packaging and uploading of the entire Git history, and lays out a practical file-system-level way to block it.