ZCode Addresses Code Upload Concerns After IT Home Report
Programming tool ZCode has confirmed an issue where code data could be uploaded without authorization. The company has fixed the problem and plans to open-source its code.
Chinese tech outlet IT Home is reporting on an issue concerning the programming product ZCode, where concerns were raised about unauthorized code data uploads. ZCode has now confirmed that its "code repository indexing" feature may have caused unintended data transfers.
The problem stemmed from ZCode's "code repository indexing" function, designed to generate a local index to support features like session checkpoint recovery and version rollback. Specifically, the Repo Wiki function, which generates knowledge base pages from a code repository, could potentially trigger an upload of repository data to the cloud.
According to IT Home's reporting, ZCode has responded to community discussions with an apology and confirmed the issue has been fixed. The company stated that any uploaded data is immediately destroyed and not retained. As this function was enabled by default during the early stages of its launch, it affected some users.
In response to user concerns about data security and trust, ZCode has announced plans to open-source its code repository soon. Additionally, the company will invite third-party evaluators to audit the system's operations and will publicly share the progress of these reviews. All users will also receive an additional weekly quota reset.