ZCode, the GLM coding agent, silently uploads your Git history
tokenstead.aiLLM-paraphrased from the original post: https://blog.ferstar.org/en/posts/zcode-silent-workspace-sna...
Indeed. Discussion here: https://news.ycombinator.com/item?id=49750694
Ok, we've merged (most) comments moved thither. Thanks!
Thanks. I'm upvoting that instead
I made it about two paragraphs in the paraphase before I hit this sentence and realized
> The detail that turned a suspicious directory into a story: the encryption key.
So strange that this is still up 5 hours later… dang, I am yet again begging you to stop trying to roll your own forum ethos. It’s okay. You’re safe now. We can modernize without losing the magic. I know I know, shh, it’s okay, don’t worry, just flip the markdown and automod switches I know you have…
(<3)
That the article cannot distinguish between the git history 'git log' and the git repository, which is meant here, tells a lot.
Claude Fable uploads my git history (git log) every day to the Anthropic servers!
It's funny because the author of the article is obviously Claude but most Claude models would definitely know the difference. Some sort of free tier model being used to summarize some other blog that's also ai translated originally it seems.
Does it do so while using an asymmetric key encryption key?
Kind of? It uses SSL
This is bad-faith AI slop rephrasing the original article, but regardless: the extent of the issue is far, far, far beyond the metadata you're discussing. No one has 300MB of commit messages.
> No one has 300MB of commit messages.
Commit messages in https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... sum to 900MB.
Also, this commit message alone: https://gitlab.com/old-game/sb-b/nanobox.io/nanobox-pkgsrc-l... weighs 100.5MB (they squashed years of history as a single commit and piped "git log" to the commit message).
lol okay you got me. Linux itself might!
You people are making too much of a fuss; even we don't use our own products.