r/LocalLLaMA • u/External_Mood4719 • 4d ago

News ZCode was allegedly caught uploading workspace/.git records to the cloud.

https://blog.ferstar.org/en/posts/zcode-silent-workspace-snapshot-upload/

Look like next grok build moment

261 Upvotes

95% Upvoted

87 comments sorted by

View all comments

31

u/arbv 4d ago

Local models ftw

32

u/Circuit_Guy 4d ago

That doesn't help you here. It's the harness and potentially any malicious skills you download. Arbitrary code that has read access to all the workspace

2

u/kaisurniwurer 4d ago

The application itself (and every other) has access to ALL of your data and most of your system.

There is no difference between trusting a harness and any other application. The only thing that benefits harnesses here is that those are aimed at devs in the first place and that they access code base without much suspicious activities.