Comment by bilekas

11 days ago

Because the models don't necessarily need to be hosted on hugging face. You can create a Model Card repository containing your README and from there you include instructions or a custom script in your repository that allows authenticated users to download the model.

> Doesn't sound dystopian enough without a second compelled entity?

This is the second snarky question you've made today, the other in relation to the export limit.

> Is this just upsetting because it's a product you want to enjoy?

Both are assumptions you are making and don't provide much in the way of constructive conversation, if I'm wrong about something it's alright to just point it out.

> don't necessarily need to be hosted on hugging face.

Export restrictions don't split generally hairs on technicalities like "hosting" - the "but magnet links aren't actually torrents!" defense doesn't fly when $1M fines and federal felonies are at stake. All distribution or "causing" distribution to restricted entities is prohibited.

> This is the second snarky question you've made today

It's not snark: why would Cloudflare somehow be legally or technically relevant in the context of two American companies distributing export-restricted materials? HN seems to love the "Cloudflare controls the internet!" "NSA bad!" trope.

  • > Export restrictions don't split generally hairs on technicalities like "hosting" - the "but magnet links aren't actually torrents!" defense doesn't fly when $1M fines and federal felonies are at stake. All distribution or "causing" distribution to restricted entities is prohibited.

    So why would open models that are not in the US be restricted ? The government would need to subpoena each model that was in the US individually, why would they do that when they could simply pull clout over CloudFlare, which we have seen governments do around the world. Either CloudFlare comply, or they're added a block list.

    > https://cybersecurityadvisors.network/2025/04/15/la-liga-blo...

    This is not a new thing, anyway this discussion has become too argumentative for an off the cuff comment about government over-reach.

    • > So why would open models that are not in the US be restricted ?

      Nobody said they would be?

      > subpoena each model that was in the US individually

      What does this even mean? Where did 'subpoenas' come into this conversation and how would that be useful?

      > simply pull clout over CloudFlare

      Cloudflare is an American CDN. Hugging Face is an American catalog/distributor (whatever semantic game you want to play) of models. Some of those models could be declared export-regulated. No subpoena is necessary to prevent Hugging Face or Cloudflare from distributing ITAR/EAR software, declaring any model as such, nor is trying to block something heavy-handedly at the CDN level necessary: Hugging Face will gladly comply with fine-grained requests.

      "La Liga" obviously isn't American, which is why Spanish courts are compelling their ISPs (who they actually do control) to block Cloudflare IPs. Cloudflare's customers - who are likely not Spanish - are distributing materials Spanish courts do not approve of. If Spain had the means to compel Cloudflare or their customers in question to do anything, they wouldn't need to take such a blunt approach and block other legitimate customers. Cloudflare isn't involved in that equation and this isn't at all equivalent.

      1 reply →