From PGP to Mythos: a brief history of export controls that didn't stop anyone

TL;DR

The U.S. government recently imposed export restrictions on Anthropic’s AI models Mythos and Fable, marking a rare test of export controls on frontier AI. Historically, such controls on encryption and spyware have largely been ineffective, raising questions about future AI regulation.

Last Friday, the White House ordered Anthropic to halt exports of its AI models Mythos and Fable outside the U.S., citing national security concerns. The company responded by immediately removing the models from availability, a move that tests the effectiveness of U.S. export controls on frontier AI technology.

Anthropic’s AI models Mythos and Fable, considered highly capable and potentially dangerous, were restricted from international and even domestic use by foreign nationals within the U.S., following a directive from the Commerce Department. The decision was prompted by concerns over potential misuse and ties to foreign entities, notably after Anthropic provided access to Mythos to a South Korean telecom suspected of links to China, and reports of researchers bypassing model safeguards.

Historically, U.S. efforts to control the spread of sensitive technology via export restrictions have had mixed results. In the 1990s, the government attempted to suppress encryption software like PGP, leading to the so-called Crypto Wars, which ultimately resulted in the widespread adoption of encryption protocols used globally today. Similarly, efforts to regulate spyware exports through international treaties like Wassenaar have faced challenges due to lax enforcement and countries that do not adhere to the rules, such as Israel and some European nations.

The current episode with Anthropic underscores the difficulty of enforcing export controls on advanced AI models, which can be quickly replicated or accessed through indirect channels. The incident also raises broader questions about the future of AI regulation and the ability of governments to contain frontier technology that can be used maliciously or destabilize security frameworks.

Implications of Export Controls on Frontier AI

This incident illustrates the limitations of current export control regimes in preventing the proliferation of powerful AI models. It highlights the challenge for policymakers to adapt existing frameworks, originally designed for hardware and traditional software, to rapidly evolving AI capabilities. The outcome of this standoff could influence future regulations, potentially shaping how AI labs manage access and compliance worldwide, and whether governments can effectively prevent misuse of such technologies.

PGP & GPG: Email for the Practical Paranoid

PGP & GPG: Email for the Practical Paranoid

Used Book in Good Condition

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Historical Attempts to Regulate Sensitive Technologies

Export controls on encryption and spyware have a long history of mixed success. In the 1990s, the U.S. attempted to restrict PGP encryption software, leading to the Crypto Wars, which ended with widespread adoption of encryption standards used today. Since then, international treaties like Wassenaar aimed to limit dual-use surveillance and hacking tools, but enforcement has been inconsistent. Countries like Israel and some European nations have allowed exports of spyware to authoritarian regimes, despite international efforts to curb such practices. These failures demonstrate the difficulty of controlling advanced, easily replicable technology across borders, a pattern now echoed in the AI domain.

“The episode with Anthropic reveals how difficult it is to enforce export controls on cutting-edge AI, which can be quickly accessed through indirect channels.”

— Lorenzo Franceschi-Bicchierai

Train It. Tame It. Teach It.: Build Your Personal AI Team and Get Every Model to Work Your Way (The AI Practitioner's Edge)

Train It. Tame It. Teach It.: Build Your Personal AI Team and Get Every Model to Work Your Way (The AI Practitioner's Edge)

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Unresolved Questions About AI Export Restrictions

It remains unclear whether the U.S. government will lift the export restrictions on Mythos and Fable or implement new regulations. The long-term effectiveness of such controls on frontier AI is still uncertain, especially given past failures with encryption and spyware. Additionally, the extent to which other countries will adopt or resist similar measures is not yet known.

AI-Powered Safety: Streamlined EHS Operations for Managers

AI-Powered Safety: Streamlined EHS Operations for Managers

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps in AI Export Control Enforcement

The administration is expected to review the situation over the coming weeks, potentially adjusting policies or engaging in diplomatic discussions with allies. Meanwhile, AI labs may seek alternative ways to distribute models or develop new safeguards. The broader debate about regulating advanced AI models and preventing misuse is likely to intensify, with future actions depending on the political and technological developments.

Python for Cybersecurity: Build 10 Real Security Tools and Become Job Ready

Python for Cybersecurity: Build 10 Real Security Tools and Become Job Ready

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Will Anthropic be able to restore access to Mythos and Fable?

It is not yet clear if or when the restrictions will be lifted. The government has not announced any plans to reverse the decision, but negotiations or policy adjustments could occur.

How effective are export controls in regulating AI technology?

Historically, export controls on encryption and spyware have had limited success, often due to enforcement challenges and circumvention. The current AI restrictions highlight similar difficulties.

Could other countries impose similar restrictions on AI models?

It is possible, especially if major AI-producing nations see value in restricting access to frontier models. However, enforcement and compliance vary widely among countries.

What are the risks of unregulated AI models like Mythos?

Unregulated, powerful AI models could be used maliciously, for misinformation, cyberattacks, or other security threats, making regulation a critical issue.

Source: Hacker News


You May Also Like

Data processing agreement tracker for micro SaaS teams

A new DPA tracker for micro SaaS teams is being tested as a workflow tool to streamline vendor and customer data paperwork, addressing privacy demands.

7 Best Security Surveillance Deals for Prime Day Savings in 2026

Discover the best security surveillance deals for Prime Day 2026, including top picks for wired, wireless, and multi-camera setups to enhance home security.

Matrix Orthogonalization Improves Memory in Recurrent Models

Research shows that orthogonalizing mLSTM memory matrices improves associative recall performance in noisy tasks, enhancing recurrent model memory.

The Real Cost of a Local-Inference Rig in 2026

Thorsten Meyer AI says disciplined buyers should size local inference rigs around VRAM, not the newest GPU.