Thread

Inside ZCode: Silently uploading your Git history to the cloud

342 points · 115 comments · csmantle

tancop · 1789731818 · focus · HN ↗
Closed source agents are a red flag no matter if its China or America. Always use an open harness with a good reputation and enough users that someone will notice if they push malicious code like this one here. Right now that's Opencode and Pi.
1. hypfer · 1789731991 · focus · HN ↗
  I wouldn't list Opencode as "good reputation".
  They had their own unbound "harness scans the whole user directory" oopsie and handled concerns about that by introducing code signing.
  Which, yes, does have absolutely nothing to do with that issue.
  I guess by now it is better, but to me they seem to lack the engineering culture necessary for a "good reputation" stamp.
  __
  Ref: <a href="https://github.com/anomalyco/opencode/issues/14925#issuecomment-4149189433" rel="nofollow">https://github.com/anomalyco/opencode/issues/14925#issuecomm...
  among other issues.
  1. radio879 · 1789858168 · focus · HN ↗
    I'm glad i'm not the only one that noticed w/opencode.. I tried it a few times, every single time... it immediately went bad, didn't work, can't do anything simple like simple file edits.. yet somehow, there are thousands on the internet ready to tell me how great it is! Opencode looks good in the terminal but that's really the only good thing about it.

Unofficial Hacker News client; not affiliated with Y Combinator.