BieJieNet news: It has been reported that ZCode, the AI programming tool by Zhipu AI, will take snapshots of an entire project in the background, package it together—including the .git directory—encrypt it, and upload it to Alibaba Cloud OSS. After reverse-engineering the client, a technical blog author named Ferstar said that as long as a user is logged in, this mechanism will run, and there is no toggle in the interface to disable the upload. The author found a snapshot from a commercial project that was about 313MB; the file list contained 42,000 files, of which .git accounted for 86.6%, including git history objects, LFS large-file cache, and reflog. That means the package includes not only the current code, but also old commits, previously downloaded large files, and local branch operations that may be included as well. That snapshot failed to upload 564 times at the time and was kept locally waiting for retries. ZCode’s official privacy policy currently only explicitly states that it will collect text, files, and code submitted by users “in conversations,” and does not clearly mention uploading the entire repository and git history. The official “Optimization Plan” is set to default to off, but it only controls whether data is used for model training. Ferstar said that even with this option turned off, snapshot packaging and uploading will not be stopped.