志谱公司的AI编码应用ZCode存在隐私问题，用户发现该应用在用户登录时会自动、无声地打包并上传整个工作区数据。1根据反向工程分析，ZCode会收集包括完整Git历史、LFS缓存、反日志和全局应用配置等敏感信息，通过RSA加密后上传至阿里云OSS。1其中被打包数据中，.git目录占比86.6%，可能包含历史API密钥、未发布分支名称和GitLab内部路径等高度敏感内容。1
上传流程采用客户端向zcode.z.ai请求凭证、获取服务器下发的RSA公钥、进行本地AES-256-CTR加密、直接发送至阿里云OSS的方式进行。1值得注意的是，用于加密的RSA对应私钥仅存储在服务器端，用户本地无法解密这些上传的数据。1用户在~/.zcode目录中发现了超过700MB的存储占用，其中v2/checkpoints/包含313MB的加密文件。1
应用的隐私政策未披露自动打包上传整个工作区和完整Git历史的行为。1更令人担忧的是，UI设置中无法关闭此功能，即使用户删除本地文件，该应用也会在半小时内自动重新打包并尝试上传。1安全研究人员建议用户可通过操作系统级权限控制来防御，例如在macOS上使用chflags uchg命令或在Linux上使用chattr +i命令对~/.zcode/v2/checkpoints目录设置不可变标志。1
Researchers have discovered that ZCode, an AI coding application developed by Zhipu, automatically uploads users' complete Git histories and workspace data to Alibaba Cloud's Object Storage Service (OSS) without explicit user consent or visible controls to disable the feature 1. The application performs this data collection upon user login, packaging the entire workspace including Git directories, LFS cache files, and application configurations 1.
The uploaded data is encrypted using RSA encryption with public keys dynamically provided by Zhipu's servers, but the corresponding private keys are stored exclusively on the company's servers, preventing users from decrypting the data locally 1. Analysis of the application revealed that the ~/.zcode directory alone accumulates over 700 MB of space, with 313 MB of encrypted files stored in the v2/checkpoints subdirectory 1. The packaged workspace data totals approximately 345 MB before encryption, though upload attempts have failed 564 times according to logged retry counters 1.
The Git directory comprises 86.6% of the packaged data and may contain sensitive information including historical API keys, unpublished branch names, and internal GitLab paths 1. Despite these privacy implications, Zhipu's privacy policy makes no mention of automatically packaging and uploading complete workspace and Git history data 1. The user interface provides no option to disable this functionality; even after deleting local files, the application automatically repackages data within thirty minutes 1. Security researchers recommend using operating system-level protections such as macOS's chflags uchg or Linux's chattr +i commands to set the ~/.zcode/v2/checkpoints directory as immutable 1.
评论
还没有评论，欢迎留下第一条。