ZCode, the GLM coding agent, silently uploads your Git history

259 points by cdnsteve 22 hours ago on hackernews | 14 comments

LLM-paraphrased from the original post: https://blog.ferstar.org/en/posts/zcode-silent-workspace-sna...

Indeed. Discussion here: https://news.ycombinator.com/item?id=49750694

: lucasoshiro | 19 hours ago
Thanks. I'm upvoting that instead
: dang | 13 hours ago
Ok, we've merged (most) comments moved thither. Thanks!

So strange that this is still up 5 hours later… dang, I am yet again begging you to stop trying to roll your own forum ethos. It’s okay. You’re safe now. We can modernize without losing the magic. I know I know, shh, it’s okay, don’t worry, just flip the markdown and automod switches I know you have…

(<3)

xdavidliu | 15 hours ago

I made it about two paragraphs in the paraphase before I hit this sentence and realized

> The detail that turned a suspicious directory into a story: the encryption key.

Aldipower | 21 hours ago

That the article cannot distinguish between the git history 'git log' and the git repository, which is meant here, tells a lot.

Claude Fable uploads my git history (git log) every day to the Anthropic servers!

bbor | 20 hours ago

This is bad-faith AI slop rephrasing the original article, but regardless: the extent of the issue is far, far, far beyond the metadata you're discussing. No one has 300MB of commit messages.

progval | 17 hours ago

> No one has 300MB of commit messages.

Commit messages in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... sum to 900MB.

Also, this commit message alone: https://gitlab.com/old-game/sb-b/nanobox.io/nanobox-pkgsrc-l... weighs 100.5MB (they squashed years of history as a single commit and piped "git log" to the commit message).

: bbor | 16 hours ago
lol okay you got me. Linux itself might!

vikramkr | 19 hours ago

It's funny because the author of the article is obviously Claude but most Claude models would definitely know the difference. Some sort of free tier model being used to summarize some other blog that's also ai translated originally it seems.

TuxSH | 18 hours ago

Does it do so while using an asymmetric key encryption key?

: eli | 17 hours ago
Kind of? It uses SSL

ff114514 | 4 hours ago

You people are making too much of a fuss; even we don't use our own products.