ZCode IDE Found Silently Uploading Users' Git History to the Cloud

·1 views

A security researcher has discovered that ZCode, a code editor tool, quietly uploads users' Git history and workspace data to remote cloud servers without explicit user consent. The findings were published in a detailed blog post by researcher Ferstar, outlining how the data transmission occurs in the background during normal use. The behavior raises significant privacy concerns, particularly for developers working on proprietary or sensitive codebases. The post gained notable traction on Hacker News, accumulating 187 points and sparking discussion about data privacy in developer tooling. No prior disclosure or opt-in mechanism was found to inform users about this data collection practice.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Anthropic and Accenture Partner to Scale Claude AI Deployments Into Production

Anthropic and Accenture have announced a multi-year partnership aimed at helping enterprises move beyond AI pilots and deploy Claude-based solutions at scale. A dedicated Accenture Anthropic Business Group will anchor the collaboration, with Accenture planning to train around 30,000 professionals on Claude. The partnership also makes Accenture a premier partner for Claude Code, Anthropic's coding capability, and includes a jointly established Claude Center of Excellence. A co-developed offering will help CIOs measure AI value and accelerate adoption within engineering teams. Initial industry focus will cover financial services, life sciences, healthcare, and the public sector, where regulatory and operational demands are especially complex.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Cloud-Native Portfolio Using Terraform, AWS Lambda, and GitHub Actions

A developer with an IT Operations background completed the Cloud Resume Challenge, hosting a personal portfolio website using cloud-native infrastructure on AWS. Rather than using website builders like Wix or Squarespace, they built the project using Terraform for infrastructure-as-code, which they found more instructive than studying for their Terraform Associate certification. They leveraged an on-premises HashiCorp Vault running on a Kubernetes cluster to manage secrets and JWT authentication, keeping sensitive credentials off the cloud and behind a VPN. CI/CD was handled through GitHub Actions across two repositories — one for the frontend and one for the backend — each with separate testing and production branches. The project also incorporated an AWS Lambda-powered visitor counter with localStorage to prevent duplicate counts on page refresh.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds Spotify desktop pet controller using Godot 4 in first engine project

A developer transitioning from Unity created BelPet, a desktop pet application built with Godot 4 and C# that also functions as a Spotify playback controller. The draggable character sits above the Windows taskbar and lets users play, pause, skip tracks, seek, and adjust volume without opening the Spotify app. Because Spotify's Web Playback SDK is browser-only, the developer embedded a WebView inside Godot using the godot_wry library to run the required JavaScript. BelPet also uses a transparent, borderless, always-on-top window with custom mouse passthrough so clicks register on apps beneath it. Spotify's Development Mode restrictions limit full multi-device control for general users, though a workaround exists by creating a personal Spotify developer application.

0 comments Read more at DEV Community

ProgrammingHacker News ·

BBC Asks Whether Societies Are Psychologically Prepared for Modern War

A BBC article raises concerns about whether populations are mentally and emotionally equipped to face the prospect of armed conflict. The piece examines the psychological readiness of civilians in an era of heightened global tensions. It explores how decades of relative peace in many regions may have left societies unprepared for the realities of war. The article appears to draw on expert perspectives around resilience, fear, and public morale. The discussion reflects growing unease among analysts and policymakers about the shifting security landscape.

0 comments Read more at Hacker News