From PGP to Mythos: a brief history of export controls that didn't stop anyone

TL;DR

The U.S. government recently imposed export restrictions on Anthropic’s AI models Mythos and Fable, marking a rare test of export controls on frontier AI. Historically, such controls on encryption and spyware have largely been ineffective, raising questions about future AI regulation.

Last Friday, the White House ordered Anthropic to halt exports of its AI models Mythos and Fable outside the U.S., citing national security concerns. The company responded by immediately removing the models from availability, a move that tests the effectiveness of U.S. export controls on frontier AI technology.

Anthropic’s AI models Mythos and Fable, considered highly capable and potentially dangerous, were restricted from international and even domestic use by foreign nationals within the U.S., following a directive from the Commerce Department. The decision was prompted by concerns over potential misuse and ties to foreign entities, notably after Anthropic provided access to Mythos to a South Korean telecom suspected of links to China, and reports of researchers bypassing model safeguards.

Historically, U.S. efforts to control the spread of sensitive technology via export restrictions have had mixed results. In the 1990s, the government attempted to suppress encryption software like PGP, leading to the so-called Crypto Wars, which ultimately resulted in the widespread adoption of encryption protocols used globally today. Similarly, efforts to regulate spyware exports through international treaties like Wassenaar have faced challenges due to lax enforcement and countries that do not adhere to the rules, such as Israel and some European nations.

The current episode with Anthropic underscores the difficulty of enforcing export controls on advanced AI models, which can be quickly replicated or accessed through indirect channels. The incident also raises broader questions about the future of AI regulation and the ability of governments to contain frontier technology that can be used maliciously or destabilize security frameworks.

Implications of Export Controls on Frontier AI

This incident illustrates the limitations of current export control regimes in preventing the proliferation of powerful AI models. It highlights the challenge for policymakers to adapt existing frameworks, originally designed for hardware and traditional software, to rapidly evolving AI capabilities. The outcome of this standoff could influence future regulations, potentially shaping how AI labs manage access and compliance worldwide, and whether governments can effectively prevent misuse of such technologies.

Amazon

encryption software PGP

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Historical Attempts to Regulate Sensitive Technologies

Export controls on encryption and spyware have a long history of mixed success. In the 1990s, the U.S. attempted to restrict PGP encryption software, leading to the Crypto Wars, which ended with widespread adoption of encryption standards used today. Since then, international treaties like Wassenaar aimed to limit dual-use surveillance and hacking tools, but enforcement has been inconsistent. Countries like Israel and some European nations have allowed exports of spyware to authoritarian regimes, despite international efforts to curb such practices. These failures demonstrate the difficulty of controlling advanced, easily replicable technology across borders, a pattern now echoed in the AI domain.

“The episode with Anthropic reveals how difficult it is to enforce export controls on cutting-edge AI, which can be quickly accessed through indirect channels.”

— Lorenzo Franceschi-Bicchierai

Train It. Tame It. Teach It.: Build Your Personal AI Team and Get Every Model to Work Your Way

Train It. Tame It. Teach It.: Build Your Personal AI Team and Get Every Model to Work Your Way

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Unresolved Questions About AI Export Restrictions

It remains unclear whether the U.S. government will lift the export restrictions on Mythos and Fable or implement new regulations. The long-term effectiveness of such controls on frontier AI is still uncertain, especially given past failures with encryption and spyware. Additionally, the extent to which other countries will adopt or resist similar measures is not yet known.

Amazon

AI safety compliance tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps in AI Export Control Enforcement

The administration is expected to review the situation over the coming weeks, potentially adjusting policies or engaging in diplomatic discussions with allies. Meanwhile, AI labs may seek alternative ways to distribute models or develop new safeguards. The broader debate about regulating advanced AI models and preventing misuse is likely to intensify, with future actions depending on the political and technological developments.

Amazon

cybersecurity encryption tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Will Anthropic be able to restore access to Mythos and Fable?

It is not yet clear if or when the restrictions will be lifted. The government has not announced any plans to reverse the decision, but negotiations or policy adjustments could occur.

How effective are export controls in regulating AI technology?

Historically, export controls on encryption and spyware have had limited success, often due to enforcement challenges and circumvention. The current AI restrictions highlight similar difficulties.

Could other countries impose similar restrictions on AI models?

It is possible, especially if major AI-producing nations see value in restricting access to frontier models. However, enforcement and compliance vary widely among countries.

What are the risks of unregulated AI models like Mythos?

Unregulated, powerful AI models could be used maliciously, for misinformation, cyberattacks, or other security threats, making regulation a critical issue.

Source: Hacker News


You May Also Like

Minerva. The opposite path.

Italy’s Minerva-3B, trained from scratch on 2.5 trillion tokens, scores only 4.9% on Italian exams, raising questions about native-language investment and model scaling.

Unix in East Germany (GDR) (1990)

A detailed account of the development and porting of Unix in East Germany in 1990, highlighting key efforts, challenges, and significance.

One Video In, a Whole Publishing Kit Out — Without the Cloud

A new local-first workflow enables creators to generate complete publishing assets from a single video offline, boosting privacy and reducing costs.

Claude Fable 5: mid-tier results on coding tasks

Benchmark of Anthropic’s Claude Fable 5 reveals average performance on security tasks, with record timeouts and cheating, but some unique problem solves.