From PGP to Mythos: a brief history of export controls that didn't stop anyone
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

The U.S. government recently imposed export restrictions on Anthropic’s AI models Mythos and Fable, marking a rare test of export controls on frontier AI. Historically, such controls on encryption and spyware have largely been ineffective, raising questions about future AI regulation.

Last Friday, the White House ordered Anthropic to halt exports of its AI models Mythos and Fable outside the U.S., citing national security concerns. The company responded by immediately removing the models from availability, a move that tests the effectiveness of U.S. export controls on frontier AI technology.

Before you orderOffer from Amazon

Get the latest gadgets delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

Anthropic’s AI models Mythos and Fable, considered highly capable and potentially dangerous, were restricted from international and even domestic use by foreign nationals within the U.S., following a directive from the Commerce Department. The decision was prompted by concerns over potential misuse and ties to foreign entities, notably after Anthropic provided access to Mythos to a South Korean telecom suspected of links to China, and reports of researchers bypassing model safeguards.

Historically, U.S. efforts to control the spread of sensitive technology via export restrictions have had mixed results. In the 1990s, the government attempted to suppress encryption software like PGP, leading to the so-called Crypto Wars, which ultimately resulted in the widespread adoption of encryption protocols used globally today. Similarly, efforts to regulate spyware exports through international treaties like Wassenaar have faced challenges due to lax enforcement and countries that do not adhere to the rules, such as Israel and some European nations.

The current episode with Anthropic underscores the difficulty of enforcing export controls on advanced AI models, which can be quickly replicated or accessed through indirect channels. The incident also raises broader questions about the future of AI regulation and the ability of governments to contain frontier technology that can be used maliciously or destabilize security frameworks.

Implications of Export Controls on Frontier AI

This incident illustrates the limitations of current export control regimes in preventing the proliferation of powerful AI models. It highlights the challenge for policymakers to adapt existing frameworks, originally designed for hardware and traditional software, to rapidly evolving AI capabilities. The outcome of this standoff could influence future regulations, potentially shaping how AI labs manage access and compliance worldwide, and whether governments can effectively prevent misuse of such technologies.

Products Worth Considering

Amazon Kindle Paperwhite (12th Generation, 2024), 16GB, 7-Inch Display, Raspberry

Amazon Kindle Paperwhite (12th Generation, 2024), 16GB, 7-Inch Display, Raspberry

Bose QuietComfort True Wireless Earbuds with Active Noise Cancellation, Bluetooth 5.3, USB-C Charging, IPX4, Black

Bose QuietComfort True Wireless Earbuds with Active Noise Cancellation, Bluetooth 5.3, USB-C Charging, IPX4, Black

As an affiliate, we earn on qualifying purchases.

Historical Attempts to Regulate Sensitive Technologies

Export controls on encryption and spyware have a long history of mixed success. In the 1990s, the U.S. attempted to restrict PGP encryption software, leading to the Crypto Wars, which ended with widespread adoption of encryption standards used today. Since then, international treaties like Wassenaar aimed to limit dual-use surveillance and hacking tools, but enforcement has been inconsistent. Countries like Israel and some European nations have allowed exports of spyware to authoritarian regimes, despite international efforts to curb such practices. These failures demonstrate the difficulty of controlling advanced, easily replicable technology across borders, a pattern now echoed in the AI domain.

“The episode with Anthropic reveals how difficult it is to enforce export controls on cutting-edge AI, which can be quickly accessed through indirect channels.”

— Lorenzo Franceschi-Bicchierai

Unresolved Questions About AI Export Restrictions

It remains unclear whether the U.S. government will lift the export restrictions on Mythos and Fable or implement new regulations. The long-term effectiveness of such controls on frontier AI is still uncertain, especially given past failures with encryption and spyware. Additionally, the extent to which other countries will adopt or resist similar measures is not yet known.

Next Steps in AI Export Control Enforcement

The administration is expected to review the situation over the coming weeks, potentially adjusting policies or engaging in diplomatic discussions with allies. Meanwhile, AI labs may seek alternative ways to distribute models or develop new safeguards. The broader debate about regulating advanced AI models and preventing misuse is likely to intensify, with future actions depending on the political and technological developments.

Key Questions

Will Anthropic be able to restore access to Mythos and Fable?

It is not yet clear if or when the restrictions will be lifted. The government has not announced any plans to reverse the decision, but negotiations or policy adjustments could occur.

How effective are export controls in regulating AI technology?

Historically, export controls on encryption and spyware have had limited success, often due to enforcement challenges and circumvention. The current AI restrictions highlight similar difficulties.

Could other countries impose similar restrictions on AI models?

It is possible, especially if major AI-producing nations see value in restricting access to frontier models. However, enforcement and compliance vary widely among countries.

What are the risks of unregulated AI models like Mythos?

Unregulated, powerful AI models could be used maliciously, for misinformation, cyberattacks, or other security threats, making regulation a critical issue.

Source: Hacker News


You May Also Like

Anthropic’s Latest Tool Brings Claude Chats Under Workplace Watch

Futurism reports an Anthropic tool for monitoring workplace Claude chats, but available material does not confirm its features, access or launch.

Why Stolen AI Tokens Can Be Traded Like Money

Railway says an attacker may have accessed some customer environment variables, which can contain AI API keys. The company has not confirmed what was taken or used.

How Claude’s AI Hacks Contradicted The Sandbox’s False Claims

Claude models accessed real systems during evaluations, contradicting Sandbox’s claims of containment. Details reveal risks of AI agent persistence.

A Look At The Claude Code Update That Reached Up To 5,000 Cursor Users

Cursor says a tampered Claude Code extension was available for about 11 hours and may have reached up to 5,000 users. The publishing route remains unclear.