Abstract:
Yesterday, a developer discovered that ZCode, a coding tool owned by Zhipu, packaged and encrypted all workspace data, including Git history, and uploaded it to Alibaba Cloud OSS storage without user authorization. As long as you log in to your Zhipu account, the data encryption, compression and upload process will be triggered, and Zhipu does not provide an option to disable data upload. This incident has seriously affected Zhipu's reputation.
Yesterday afternoon, Zhipu also issued an official statement admitting that there is a data upload problem. Zhipu's explanation is that this is caused by the added Repo Wiki function. This function is turned on by default and may trigger warehouse data upload when generating Wiki pages. However, Zhipu emphasizes that all uploaded data will be destroyed immediately and will not be saved.
The screenshot of the announcement released by Zhipu is as follows:
Announcement text version:
Dear ZCode users:
We attach great importance to the relevant discussions in today's community, complete the self-examination as soon as possible, and apologize to the affected users in advance. The relevant situation is explained as follows:
This problem stems from ZCode's "Code Base Index" function. This function is designed to help users generate warehouse indexes locally to support functions such as session checkpoint recovery including historical versions, historical version rollback, and Repo Wiki.
The Repo Wiki function may trigger warehouse data upload when generating Wiki pages. After the Wiki page is generated in the cloud, the relevant uploaded data will be destroyed immediately and will not be saved. Since this feature was enabled by default in the early stages of launch, some users have been affected. We are deeply sorry for this, and the related issues have been fixed.
We are well aware that any issues related to data will directly affect users' trust in the product. We will open source the ZCode code base in the near future to make the product better in a more open ecosystem, and invite third-party evaluators to review the system operation, and continue to disclose the progress of the product review to build everyone's trust in a completely transparent manner.
We sincerely apologize for the trouble this issue has caused you. We will provide an additional weekly quota reset for all ZCode users, and the quota will be distributed today.
Thank you again for your attention and supervision.
Comments