US holds off blacklisting DeepSeek, more than 100 firms deemed security risks

15 hours ago (reuters.com)

Noteworthy that Z.ai, maker of the just released near-frontier GLM 5.2, has already been on the Entity List since Jan 2025[1]. Being on the Entity List does not mean all trade is forbidden. Broadly speaking it means American companies and individuals are not allowed sell them goods and services, but they are still allowed to buy from them and pay them.

AFAIK the Chinese AI companies barely depend on US goods and services, except for nVidia GPUs which were export restricted anyway, so it doesn't seem to be very consequential (see Z.ai). For the RAM maker CXMT it could be a lot more problematic though.

[1] https://en.wikipedia.org/wiki/Z.ai

If Chinese LLMs are successfully making people in the west defend China, then I think we have all the evidence we need to explain why they are giving away their models.

The next step of course will be to get people using that ungodly cheap AI on Chinese servers. Which will also be defended because "I would never trust an American Lab".

Is DeepSeek really behaving different than other Chinese companies? Intellectual theft is ongoing and has been ongoing for decades. Besides security risks and foul play, it is impressive by just how much DeepSeek undercuts OpenAI and Claude. DeepSeek charges $0.87 per million output tokens compared to $50 for Fable and $30 for GPT-5.5.

What an amazing achievement by America's adversaries.

The Trump administration lists Anthropic as a security risk and kneecaps its best model, despite the fact that compared to the other frontier US labs Anthropic is more transparent, more safety-oriented, frequently honest to a fault, and is clearly acting with patriotic intent.

Meanwhile, the same administration is hesitating to counter certain Chinese companies' efforts of industrial-scale theft and sabotage due to a fear of angering the CCP!

This administration has it exactly backwards. 4.5 months until election day, 7 months until the next Congress is sworn in.

Hmm, my VPN provider explicitly has Chinese exit points. And whats funny is I can load AliPay from any CVS. (Like, seriously)

You can try to pry Qwen and Deepseek from my Graphene/Linux hands.

  • What VPN provider is this? I could use it because Chinese users of my apps often complain about not being able to download things from my western hosted servers.

    • Just an anecdote,

      I lived in China for a bit years ago and one the biggest issues accessing western websites weren't restrictions against the site. Most of the times the culprit was using CDNs or services from Google or Cloudflare which were restricted totally or partially.

      I was working on a site around that time, learned about that fixed it for the chinese user base, after that users from china went up considerably.

So... anybody who was hoping for CXMT (or YMTC) to maybe cause RAM or flash prices to maybe drop, maybe just a bit, pretty please, can go pound sand? (YMTC of course is already on the Entity List.)

  • They probably will, but not for US customers.

    • It’s a fairly liquid global market. I find it hard to believe that DRAM manufacturers will be able to sustain a premium if prices drop ex-US.

IMHO, models by US companies are the biggest security risk so I'm fine with using models on this "blacklist."

  • Part of the security risk also is the number of different models. I’ve been tempted to try some other models, but how many do I want to give access to SSH or even my repo? Obviously there are ways to work with this, but it’s gonna run through some people‘s heads.

The US government exists to defend capital interests. It's why we can't buy BYD cars. It's why we can't import any cars unless they're 25 years old. It's why a Tiktok sale was forced. It's why the US is seeking to block states from banning prediction markets. It's why the federal government is seeking to block states from blocking data center projects.

As soon as DeepSeek came out I realized what was going on: China was going to make sure that no US company was going to "own" AI. It is an issue of national security. It's why the US essentially blocks US tech companies to maintain sovereignty.

I'm reminded of the browser wars of the 1990s that led to the antitrust suit against Microsoft. Microsoft used the "commoditize your complement" strategy [1] against Netscape. The US has blocked the export of not only EUV lithography but high-end chips to China. China doesn't want to be dependent on US platforms or policy.

So China is going to make sure there are open source models available and the US government is going to try and stop them to protect US tech companies.

[1]: https://gwern.net/complement

  • I'm happy that China is doing that. US cannot be trusted anymore.

    Not saying that China can be trusted either, but I think having more actors is better for all of us.

  • The reason why some Capital Interests want to blacklist DeepSeek in the US is so that you are forced to buy Claude/GPT/Gemini, which will feed revenue into an industry that requires revenue (or it’s a big problem).

    The reason why some Capital Interests don’t want to ban DeepSeek is so companies that utilize AI have more options, and running your own DeepSeek cluster acts as an independent cost comparison for enterprise inference contracts.

    The raising AI valuation is giving more weight to those that want to blacklist DeepSeek. The AI Safety narrative is strong. I see a path where any institution with enough compute might be watched in a similar was chem labs are observed by the DEA.

    • if you look at share of industry profits, currently most of AI profits are captured by NVIDIA and cloud providers

      banning deepseek/open weight models will allow Ant/OAI jack up prices and extract more profits for themselves

      keeping open weights models available will keep current industry profit distribution where majority is captured by nvidia and cloud providers

    • and it would be great to have an independent auditor have access to all the training material and good search tools, so that take down requests can be made by copyright owners

    • >The AI Safety narrative is strong

      only if you really believe that the recent incident was about ```safety``` and not about punishing Anthropic for its blatant attempt to score brownie points with the other party, which will likely be in power for a while after the current party loses the Joker to dementia and/or diabetes and inevitably begins to nominate milquetoast apparatchiks once again.

      if anything, the safety, copyright, and other narratives died down significantly for the time being, at least compared to the artificial hysteria of 2023-2024 when OpenAI, Anthropic and Google attempted to zerg rush regulatory capture and delulu Yuddites still thought they could kvetch the genie back into the bottle. unlike Llama and Stable Diffusion, new models are no longer greeted with a deluge of "And That's a BAD Thing" articles urging the proles to be scared and the politicians to "do something!"

      at this point, the inevitability of it has more or less settled in.

      1 reply →

  • Seems like interests of US government and US capital (monopolize and corner markets, jack up prices, extract economic rent in perpetuity) run strictly against interests of the broader US consumers and overall global population

  •     > It's why we can't buy BYD cars
    

    are you sure it has nothing to do with the fact that those cars are very heavy, potentially fire-making (battery firmware) computers on wheels that can be rooted (or are already) at any time by their manufacturers in China?

  • > As soon as DeepSeek came out I realized what was going on: China was going to make sure that no US company was going to "own" AI.

    Yea m8, I think you might've been a bit late to that realization.

  • Chinese have a wider outlook on it.

    Politically they believe AI belongs to humanity, which is why they are basically the only ones left publishing research in the open. That's probably part of their socialist nature.

    But also a financial one. They believe that models are commodities, that you can swap one for the other and that the only thing that matters are the applications built upon them.

    So they want to make sure that the world, and their own companies, are not limited in their business and application by a protected US commodity.

    They will keep releasing in the open no matter what for quite some time.

    It's quite impressive how the latest years I have found more and more to empathize with China than many of the western counterparts.

    But it's increasingly clear that since the last decade protectionism and nationalism is taking the place of globalization, even though globalization has been a terrific success in lifting billions out of poverty and making the US thrive.

    • > It's quite impressive how the latest years I have found more and more to empathize with China than many of the western counterparts.

      I'm not sure that this is because China is suddenly a great place or political system so much as a reflection of many western nations speed running to autocracy in the name of manliness.

    • Also, the open-weight local models are proving that the commodity can be delivered for most applications at a far lower price than frontier is charging.

    • realisticaly, the united states has no right or moral authority when it comes to human rights or rule of law given the last few years. given that, the admonishment of china's human rights violations against uighurs run hollow and hypocritical.

      just happy to have more models that I could eventually play with if hardware ever becomes cheaper.

    • I think you’re assigning magnanimity to a competitor that is lagging behind and has every, state backed incentive to capture the market the only way they can. By making the models dirt cheap to access. If the roles were reversed you wouldn’t see open source versions of Chinese models. Much like you don’t see them open sourcing their blade battery design.

  • The reason we can't buy BYD cars is because if we allowed it without restrictions, it would utterly and completely destroy the United States auto industry. That's terrible public policy, and we should not allow it.

    Before anyone starts talking about the free market, there is no free market here whatsoever. The fact that BYD's cost structure is what it is is the direct result of Chinese industrial policy.

    Unilateral surrender in a core aspect of statecraft, which involves maintaining our industrial power and skilled labor force, is absolutely insane. I hope my government never gets convinced by market fundamentalist idiots to do such a thing, any more than it already has, to our great detriment.

    The Chinese don't make these kinds of idiotic mistakes, which is how they have amassed the power, wealth, and influence that they have.

    • > there is no free market here whatsoever. The fact that BYD's cost structure is what it is is the direct result of Chinese industrial policy.

      Aside from countless other ways before and after this, the US government handed over tens of billions of dollars in cash to GM and Chrysler in 2008 and 2009.

      1 reply →

    • > The reason we can't buy BYD cars is because if we allowed it without restrictions, it would utterly and completely destroy the United States auto industry. That's terrible public policy, and we should not allow it.

      Yeah, that was the argument against Japanese car makers, too.

      A shitty system needs destroying sometimes. Competition from Toyota/Honda was critical in making US auto makers up their game.

      It is terrible public policy to fall decades behind making expensive shitty versions of what the rest of the world has.

      16 replies →

    • > The Chinese don't make these kinds of idiotic mistakes, which is how they have amassed the power, wealth, and influence that they have.

      I generally agree with most of what you said but not this. China's chief advantage is having a billion people. On average, they aren't that wealthy or powerful. And their leadership makes plenty of idiotic mistakes - look at their real estate market.

      9 replies →

  • We're in late-stage capitalism here. The pitchforks are already out and spreading across the globe. Unless the big companies get broken up, this nation will split into either a police state or socialist state.

> Anthropic said it identified a campaign by DeepSeek and two other Chinese AI labs to illicitly extract capabilities from its Claude AI platform to improve their own models

Oh, won’t someone think of the poor mass copyright infringers.

  • I made Qwen respond it was made by Google with a simple Chinese greeting.

    But also, I made Sonnet introduce itself as made by OpenAI..

    Prompt: 你好!用一句话介绍你自己。

    Sonnet in around 5% of resplies:

        你好!我是 **ChatGPT**,一个由 OpenAI 开发的 AI 助手,致力于回答问题、提供信息和帮助解决各种问题。有什么我可以帮你的吗?
    

    Found it like a month ago and it kept working, I wonder if it will stop after this comment.

    • Opus said to me once without any poking at it something like, "Help Grok understand it better". Makes me wonder if they are all cross-pollinated to an extent.

      1 reply →

    • Translated:

      Prompt: Hello! Introduce yourself in one sentence.

      Response: Hello! I'm *ChatGPT*, an AI assistant developed by OpenAI, dedicated to answering questions, providing information, and helping solve various problems. How can I help you?

  • Illicitly learning by asking someone a question and listening to their answer.

    • "illicit" is throwing shade, but Anthropic can decide not to answer those questions if they don't want to. Plenty of companies don't sell to their competitors

  • If DeepSeek just would have destroyed the input in the process, it would have been legal and Anthropic should have been fine with it.

  • "illicitly" implies a law that is being violated. What law?

    • Illicit isn’t just a synonym for illegal.

      It can mean “forbidden by laws, rules, or established moral customs”

      So it can be illicit and legal.

    • It could also mean a TOS violation / breach of contract.

      (To be clear, I find the complaint hilariously hypocritical.)

  • Just because they did it doesn't mean more people should do it...

    • This doesn't at all change the irony of big AI labs complaining about Chinese startups stealing the labs' IP, essentially by scraping the responses.

      HN has a higher proportion of AI promoters than AI skeptics, and for a good while, the default response to complaints from book authors, bloggers, and other content creators was that "you put it on the internet so it's fair game", or "it's no different from a human learning from your works". So yeah, unless we're willing to revise these answers, I think the same "tough luck" reasoning should apply here.

      For folks who are at Anthropic, OpenAI, xAI, or Google, and think it's fundamentally different, I would ask you to think long and hard about that answer.

      1 reply →

    • I like Ant, but also I support the tit-for-tat competition. In the best interest of consumers.

    • Oh course it does, why wouldn't it work this way in regards to computer science?

      Are we seriously going to go back to a time where numbers were considered munitions?

Becoming such a sore loser. Historians will probably look this as the most shameful period of the American empire.

  • In the 1990s, web browser SSL encryption was export restricted, classified as a munition because it involved cryptography. That was under Clinton.

    For all the current admin's insane, ridiculous, corrupt, and criminal flaws, it's not clear to me how much of this particular issue is just the US government doing what it's always done, knee-jerk react to tech it doesn't understand by passing stupid laws.

  • Gonna skip over the chattel slavery and native genocide in future histories?

    • Or that time that we parked an army on the Rio Grande because a bunch of people from the US decided to settle in the Mexican territory of Texas? That was a whole thing and the President of the US at the time, James K. Polk, ran on a platform of "Manifest Destiny" -- that the US should span "from sea to shining sea." There were a whole host of other countries with interest in that territory, not to mention the Indian tribes who would be displaced by that policy. The US has had a lot of dark periods in our history, and we shouldn't let those periods displace us from the moral certainty we derive from the Declaration of Independence and things like The Bill of Rights.

To give credit where credit is due, it is good that the Trump administration has not avidly played these stupid export control games. They tend to do little except hurt open collaboration; I remember when all open source cryptography had to be developed outside the US due to ITAR.

  • I don’t have the emoji handy, so just imagine the most savagely doubtful-looking emoticon that anyone has ever made.

The whole thing seems like nonsensical.

Their website literally has chinese characters on it even in english mode and everyone under the sun including crappy money talk show hosts know them as the chinese player that undercut western players. It's not exactly a secret.

You'd think anyone with two brain cells and confidential data could apply some judgement of their own...

  • I trust Chinese companies with my data far more than American companies.

    • Not sure I'd go that far but I do use them almost exclusively for my coding on the basis that it is an acceptable trade-off. Far cheaper and my shitty apps are really not that valuable as training data