The news of September 21stZhipu ZCode announced today that the ZCode product safety issue for community feedback is not the only one that has been reported by the governmentOfficially finished the overhaul and apologized to all users.
ZCode Open Source (https://github.com/zai-org/ZCode), handing over the code to community monitoring, making ZCode open and transparent。
- Thanks very much to the community developers who have previously discovered the ZCode problem, we will then establish a normal product safety loophole mechanism, welcome the ongoing inspection and feedback by the developers ' partners, and we will pay back the scale of the problem。
- For the code data mentioned in the community, we are committed to not retaining them, nor have they ever been used in model training. Upon completion of the renovation, we invited the China Institute of Information and Communication and the Green League technology to conduct a security audit, the results of which are as follows:
- According to a technical assessment conducted by the China Institute of Information and Communication Technology, the zcode-prod Aliyun Oss storage drum is confirmed as cloud zero. ZCode v3.14.0 The ZCode v3.14.0 client has completed a security overhaul, has removed Repo Wiki and has cut off the local warehouse snapshot generation and upload links。
- Based on a review of the Green League technology, it has been confirmed that all data objects within the zcode-prod (Ali Cloud Object Storage OSS) and the storage drum itself have been removed. ZCode v3.14.0 The client has been overhauled, the Repo Wiki entrance and the corresponding generation link have been removed, and no functional path has been found to trigger local warehouse snapshots or out-of-files。
- Again, I apologize for your continued monitoring。
As reported by 1AI on 18 September, in response to community discussions on the uploading of code library data, ZCode, a programming product under the flag of the spectra, apologized to affected users through official spectrograph groups and issued a response that self-checking had been completed at the first time and that the related issues had now been repaired。
Officially, the problem stems from ZCode's “Code Bank Index” function, which is designed to help users generate a local repository index to support the recovery of session points, including historical versions, the retreat of historical versions and Repo Wiki (Code Warehouse Knowledge Bank)。
Officially known as the Repo Wiki function may trigger the upload of warehouse data when generating the Wiki page (the Knowledge Bank page). The Wiki page will be destroyed and will not be saved as soon as it is generated in the cloud. Some users are affected by the default start-up of the functionality。