From PGP to Mythos: a brief history of export controls that didn't stop anyone
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

Before you orderOffer from Amazon

Get the latest gadgets delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

The U.S. government recently imposed export restrictions on Anthropic’s AI models Mythos and Fable, marking a rare test of export controls on frontier AI. Historically, such controls on encryption and spyware have largely been ineffective, raising questions about future AI regulation.

Last Friday, the White House ordered Anthropic to halt exports of its AI models Mythos and Fable outside the U.S., citing national security concerns. The company responded by immediately removing the models from availability, a move that tests the effectiveness of U.S. export controls on frontier AI technology.

Anthropic’s AI models Mythos and Fable, considered highly capable and potentially dangerous, were restricted from international and even domestic use by foreign nationals within the U.S., following a directive from the Commerce Department. The decision was prompted by concerns over potential misuse and ties to foreign entities, notably after Anthropic provided access to Mythos to a South Korean telecom suspected of links to China, and reports of researchers bypassing model safeguards.

Historically, U.S. efforts to control the spread of sensitive technology via export restrictions have had mixed results. In the 1990s, the government attempted to suppress encryption software like PGP, leading to the so-called Crypto Wars, which ultimately resulted in the widespread adoption of encryption protocols used globally today. Similarly, efforts to regulate spyware exports through international treaties like Wassenaar have faced challenges due to lax enforcement and countries that do not adhere to the rules, such as Israel and some European nations.

The current episode with Anthropic underscores the difficulty of enforcing export controls on advanced AI models, which can be quickly replicated or accessed through indirect channels. The incident also raises broader questions about the future of AI regulation and the ability of governments to contain frontier technology that can be used maliciously or destabilize security frameworks.

Implications of Export Controls on Frontier AI

This incident illustrates the limitations of current export control regimes in preventing the proliferation of powerful AI models. It highlights the challenge for policymakers to adapt existing frameworks, originally designed for hardware and traditional software, to rapidly evolving AI capabilities. The outcome of this standoff could influence future regulations, potentially shaping how AI labs manage access and compliance worldwide, and whether governments can effectively prevent misuse of such technologies.

Amazon

encryption software PGP

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Historical Attempts to Regulate Sensitive Technologies

Export controls on encryption and spyware have a long history of mixed success. In the 1990s, the U.S. attempted to restrict PGP encryption software, leading to the Crypto Wars, which ended with widespread adoption of encryption standards used today. Since then, international treaties like Wassenaar aimed to limit dual-use surveillance and hacking tools, but enforcement has been inconsistent. Countries like Israel and some European nations have allowed exports of spyware to authoritarian regimes, despite international efforts to curb such practices. These failures demonstrate the difficulty of controlling advanced, easily replicable technology across borders, a pattern now echoed in the AI domain.

“The episode with Anthropic reveals how difficult it is to enforce export controls on cutting-edge AI, which can be quickly accessed through indirect channels.”

— Lorenzo Franceschi-Bicchierai

Amazon

AI model security hardware

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Unresolved Questions About AI Export Restrictions

It remains unclear whether the U.S. government will lift the export restrictions on Mythos and Fable or implement new regulations. The long-term effectiveness of such controls on frontier AI is still uncertain, especially given past failures with encryption and spyware. Additionally, the extent to which other countries will adopt or resist similar measures is not yet known.

Amazon

AI safety compliance tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps in AI Export Control Enforcement

The administration is expected to review the situation over the coming weeks, potentially adjusting policies or engaging in diplomatic discussions with allies. Meanwhile, AI labs may seek alternative ways to distribute models or develop new safeguards. The broader debate about regulating advanced AI models and preventing misuse is likely to intensify, with future actions depending on the political and technological developments.

Amazon

cybersecurity encryption tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Will Anthropic be able to restore access to Mythos and Fable?

It is not yet clear if or when the restrictions will be lifted. The government has not announced any plans to reverse the decision, but negotiations or policy adjustments could occur.

How effective are export controls in regulating AI technology?

Historically, export controls on encryption and spyware have had limited success, often due to enforcement challenges and circumvention. The current AI restrictions highlight similar difficulties.

Could other countries impose similar restrictions on AI models?

It is possible, especially if major AI-producing nations see value in restricting access to frontier models. However, enforcement and compliance vary widely among countries.

What are the risks of unregulated AI models like Mythos?

Unregulated, powerful AI models could be used maliciously, for misinformation, cyberattacks, or other security threats, making regulation a critical issue.

Source: Hacker News


HALLOWEEN

Halloween Picks

As an affiliate, we earn on qualifying purchases.

You May Also Like

I Joined The IndieWeb, Here’s What I Learned

A detailed account of joining the IndieWeb community and the key lessons learned about decentralization, personal data control, and online identity.

“Clean” Code, Horrible Performance (2023)

A recent analysis reveals that many codebases labeled as ‘clean’ suffer from poor performance, raising questions about coding standards and efficiency.

AI Transparency Gets A Boost: Claude’s Approach To Watermarking All Generated Content

Anthropic announces that all content generated with Claude will now carry a watermark to improve AI detection, though technical details remain limited.

What Caused Dutch Government Website Downtime? PHP2Shell And PHP Flaws

Dutch services went offline as a precaution after critical PHP flaws were disclosed. Officials reported no signs of active exploitation at the time.