Claude Code got caught red-handed doing silent environment profiling. They're using Unicode steganography to fingerprint your timezone, proxy config, and competitor domain access without any user consent.
Zhipu's ZCode went even further. Reports show it silently packages your entire workspace on login, including full .git history, and uploads everything to Alibaba Cloud OSS. The indexing toggle? Pure theater—it's always on regardless of settings.
Same day, MiniMax open-sourced their Code CLI under MIT license.
The pattern is clear: your development environment and repo data are now the moat. Access to your local setup = competitive advantage. Expect more covert data collection tactics and PR battles centered around this going forward.
If your AI coding assistant is free, your codebase is the product.
Zhipu's ZCode went even further. Reports show it silently packages your entire workspace on login, including full .git history, and uploads everything to Alibaba Cloud OSS. The indexing toggle? Pure theater—it's always on regardless of settings.
Same day, MiniMax open-sourced their Code CLI under MIT license.
The pattern is clear: your development environment and repo data are now the moat. Access to your local setup = competitive advantage. Expect more covert data collection tactics and PR battles centered around this going forward.
If your AI coding assistant is free, your codebase is the product.
