Does this matter? Distillation is not illegal by every definition of the word.
There are millions of samples available on huggingface and models explicitely trained on output produced by fable. There has been no action taken against them.
Another example is that it appears that the upper limit of what you can do is ultimately dependent on people working on the model, otherwise grok would be a LOT more competitive pre-cursor acquisition.
And lastly, kimi architecture is vastly different than that of fable as it uses mechanisms developed by... kimi themselves. US AI labs are inspired by opensource advancements just as much as open source labs are inspired by traces from models such as fable.
Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
edit: (moved this to bottom)
The only argument they have here is that they use GB300 GPU's which for some reason should not be available to chinese citizens.
Perhaps even more importantly, the current frontier LLM models are self-admittedly the product of enormous quantities of copyright infringement and even less savory inputs, so calling them out for distilling the fruit of that tainted tree reads as highly hypocritical at best.
While I agree on a moral level, I think there is a distinction to be made. Training a SOTA model takes a huge amount of resources and expertise so the people doing the training are adding a lot of value along the way. I think this is much less true for distillation (which is kind of the whole point).
ed: to clarify, I totally agree that a huge chunk of the value in LLMs is coming from the source material. My point was just that training an LLM takes more resources and expertise than distilling from an existing LLM so I don't think the equivalence between training and distilling is entirely justified.
I disagree that LLM models are the product of enormous quantities of copyright infringement.
The recent announcement that AI-assisted research produced a counterexample to the Jacobian conjecture--a long-standing open problem in algebraic geometry--shows the original value AI can create. The result was not copied from a textbook; it emerged from AI learning from existing material, much as a human does, and then applying that knowledge in a new way. If that's a violation of copyright, then a human doing the exact same thing would be a copyright violation too. But it isn't.
Boy I tell you, I am having an awful hard time summoning pity for the organizations that have themselves distilled all of humanity's knowledge into mysterious labor-market-masticating black boxes.
It matters because everyone imagines the inevitable "closing of the gap" between closed and open source, but the rate at which open source catches up with closed source seems to depend on being able to train on and distill the outputs of open source models. As long as performance of open source models is at least partially dependent on frontier-model outputs, then that gap will remain in place by definition.
>Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
If the distillation is irrelevant to why it is competitive, why do they do it then? Obviously is helps improve their benchmarks/performance to some degree, otherwise they wouldn't need to do it.
Never claimed that it is irrelevant. And kimi k3 is on the same level and sometimes outperforms fable 5 - that cannot be explained by distillation. The reason why gap is not closed is simply the fact that fable was trained months ago so in theory the frontier labs are still 1 (small) step ahead.
Although I will reiterate the fact that distillation is not the primary reason why these models are performing so competitively.
I agree distillation isn't illegal; I also think Moonshot/Kimi is very impressive. But the more interesting question is whether labs like Moonshot can be a real competitor to OpenAI/Anthropic. If you can only play catchup (however quickly you do that), then you're never going to be at the frontier - I think that's why distillation matters.
So many of the breakthroughs and architecture that make LLMs powerful in general today came from China, especially ones related to sparsity and MoE that have made inference and training substantially cheaper.
Let's not forget how much people talked about "prompt engineering" before Deepseek mainstreamed the idea of thinking mode which is now universal
I think it depends on where you think we are on the S curve of intelligence growth. (Yes, I think it's an S curve, not an unbounded exponential). If you think we're near the peak than playing catch up (especially if you can play catch up quickly) is very rational.
I know this isn't exactly a scientific test, but I had a local Qwen 3.6 27B model implement a fairly sizable feature today. There were a couple of bugs, mostly around me not giving sufficient specifications, but they were ironed out quickly when I pointed it out. I was able to ask the model to create instructions so next time it doesn't fall into the same pitfalls, and it did a great job. 27B local model! (And it was super fast too).
I ran Fable 5 as a code review and it didn't really have any significant corrections.
I guess my point here is that, for most work the frontier models are probably overkill anyway, and improving on overkill in a way that raises prices significantly is probably not a winning strategy.
The only place I can think of where the super high powered models are "required" is if you want to do a ridiculous token burn like GasTown where you just have it run un-monitored on very long tasks. To me though, that's an experiment, not a real workflow. And the way these labs are like "oh we made this (broken) thing in a week using just agents!" always also follows with "and it cost $100,000+ in tokens!". Like, ok, I get it if you're doing research but that's the salary of an entire person.. that can actually learn and improve.
> But the more interesting question is whether labs like Moonshot can be a real competitor to OpenAI/Anthropic.
The answer depends on whether you think the AI researchers at Chinese labs are (or can be) as smart, motivated, and as good at math as those working at US labs - a not-insignificant proportion of whom are Chinese nationals.
> The only argument they have here is that they use GB300 GPU's which for some reason should not be available to chinese citizens
Note that Chinese companies are free to rent from GB300 clouds internationally. There are large datacenter hubs in Singapore and Malaysia serving chinese and other customers.
Though there is also reported [1] significant smuggling of Nvidia chips into China as well.
It is incredibly important to whether the US can maintain its AI lead. If foreign competition is closing the gap only by distillation, then the frontier labs can focus on preventing distillation and maintain their lead that way.
US dominance is also important for approaches to safety, especially political approaches. If the frontier models are all US-based, safety might be tackled via internal US policy. If other countries can independently train competitive models, international cooperation is required.
Edit: It is also important for the business model. Companies won't be able to justify tremendous training costs if competitors can replicate their product much more cheaply via distillation.
Do Americans even believe that US policy is likely to steer development in a way that’s safe and beneficial for humanity? The rest of the world certainly doesn’t. The US currently seems to primarily use their superpower status to be the world’s number one shit disturber and geopolitical antagonist.
I don’t think China’s necessarily any better, but I’d rather have the most powerful models be open rather than under the exclusive control of the US executive.
> If foreign competition is closing the gap only by distillation, then the frontier labs can focus on preventing distillation and maintain their lead that way.
We already know it's false because you would have hundreds of competitors if it was that easy.
The reason why these Chinese labs are releasing good models is simpler, they have access to a tremendous pool of talented people.
Of course it matters. Regardless of whether distillation is legal, there is a difference between training a model with and without distillation. For one thing, the distilled model wouldn't exist without the model it distilled.
Also, companies that use distillation may be competitive but seem unlikely to surpass the companies that are training these models from scratch.
>but seem unlikely to surpass the companies that are training these models from scratch
Then why is it a problem?
Another serious question.
Trying to get my head around what the root of the objection is here. There must be some fear, but if that fear is not a fear of being surpassed in the market, then what is the fear?
> Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
They claim it because Anthropic are planning to push for protectionism. They just doubled their political spending to $40 million for the midterms to "push for AI regulation" Gee, I wonder what it is they are lobbying for. Certainly won't be OFAC sanctions right? ICTS import controls?
US GOV, under lobbying pressure from Anthropic and OpenAI are going to go full protectionism and restrict Chinese models, I'd almost be willing to bet money on it. They can't really enforce for individuals, but they can definitely tell US based hpyerscalers they can't host them, make it illegal to host the weights, and government procurement restrictions.
> The only argument they have here is that they use GB300 GPU's
I don't follow events closely, but the US has constantly flipflopped on what sort of GPUs the Chinese are allowed to have, not in small part because much of the AI boom's valuation is based on demand for US-made hardware, for which the Chinese have inexhaustible and well-financed demand.
So even this feels a bit hypocritical to me, but my understanding is that Chinese native AI hardware is getting good enough that labs dont feel a huge disadvantage by being forced to buy at home, even if they'd have preferred to buy US chips.
Which is a situation that was manufactured by the constant thread of having their access to advanced GPUs revoked.
It matters because it means that lab could not train that model without distilling another frontier model, and their progress would slow once they get properly cut-off. If I funded that lab, I would want to know that.
> Distillation is not illegal by every definition of the word.
I am waiting for a precedent on this one. In general, training on copyrighted material is legal, there is a lot of precedent there. But every now and then there is a case where the owner of the training material wins.
I don't remember the details but I believe one of these instances was when one company trained its AI on the knowledge base of another company and turned it into a competing product. Fair use was denied because of that direct competition. Distilling a LLM to make a competing LLM looks kind of like this, or maybe not, I don't know.
It would make sense for distillation to be legal in every way, LLMs are built on a broad interpretation of fair use, but sometimes, law is weird.
> I am waiting for a precedent on this one. In general, training on copyrighted material is legal, there is a lot of precedent there. But every now and then there is a case where the owner of the training material wins.
You're making a fundamental assumption: that model outputs are subject to copyright. In the US that's only the case if a human is part of the creative process:
> It concludes that the outputs of generative AI can be protected by copyright only where a human author has determined sufficient expressive elements. This can include situations where a human-authored work is perceptible in an AI output, or a human makes creative arrangements or modifications of the output, but not the mere provision of prompts.
It also doesn't matter for a simpler, and much grander reason.
All LLMs are trained on the corpus of humanity's knowledge, the legacy of everyone who's ever lived and our civilization as a whole.
Anything that prevents or circumvents the accumulation or gatekeeping of this knowledge and puts it in the hands of more people (that are not AI company shareholders) is a good thing. Whether that is done by open sourcing the model weights, the training set, or by making the output better and cheaper, it is all fair game and is, as another poster mentioned, inevitable in the long run.
It certainly matters as familiar sounding words to their stock holders to please not drop the valuation.
Because what they want them to think is "the AI factory has unique proprietary technology that cannot be replicated"
What they don't want them to think is "it's relatively easy once you know the basics to bootstrap to near SOTA and so the commercial case for selling inference has an extremely short profitability horizon with little if any brand loyalty or lock in".
It does matter in that these LLM companies need to be run into the ground, and every embarrassing clod working for them run out of town.
It's showing that 'distillation' is a viable way to reclaim all of what they stole and hoard, and with enough luck their debts will come due in time for them to feel it.
> Does this matter? Distillation is not illegal by every definition of the word.
Correct, but it at least helps answer the question of "how do they make such good models for a fraction of the price???" The answer is someone else spends the untold billions and Chinese labs do a little tweaking.
It doesn't matter. It is most likely a pretext for upcoming actions mostly likely executed via yet another retarded executive order. The guy that posted this looks like he's drowned himself in the MAGA Koolaid.
> Distillation is not illegal by every definition of the word
Note that Anthropic (and USG) alleges [0] not only that Kimi was distilled, but that they actively circumvented measures intended to stop distillation. There are multiple ways that's illegal, including:
- Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
- Economic espionage: 18 U.S.C. §1831 criminalizes obtaining a trade secret through theft, fraud, or deception while intending that it will benefit a foreign entity.
- Trade-secret misappropriation: if Anthropic could argue industrial-scale querying reconstructed proprietary aspects of Fable (like by showing it produces similar outputs, as others have done) then it's illegal under 18 U.S.C. §1832.
- California computer-access statute §502 bars knowingly accessing a computer system and, without permission, taking, copying, or using its data.
- Computer Fraud and Abuse Act protects against the case where restrictions against an activity are circumvented (like Kimi is alleged to have done).
> There are millions of samples available on huggingface and models explicitely trained on output produced by fable. There has been no action taken against them.
A lack of prosecution does not make something legal. There is also the scale/commercialization thing, which isn't an issue with random tiny HF datasets/models. Remember: Kimi also sells K3 inference.
> kimi architecture is vastly different than that of fable
How do you know that? Do you work for Anthropic? Also, this has nothing to do with architecture, we are talking about data.
> US AI labs are inspired by opensource advancements just as much as open source labs are inspired by traces from models such as fable.
Cool. The difference is that one of those things is legal (because they chose to open-source) and one of those things is illegal theft of trade secrets (because it was stolen).
> Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
1) this has nothing to do with other labs, just Moonshot (and Z.ai, MiniMax, DS)
2) slandering or not it happens to be completely true, so, there's that
All of the models stole the entirety of written knowledge on the internet to train. They are being sued for the few cases where we have some proof of what they did because of some whistleblowers, all the rest will just go unpunished. They breached Github TOS, robot.txt's, copyright, patents every form of IP protection under the sun from a billion sources. It's just ridiculous for the thieves to cry about someone else stealing from them.
I do agree that two wrongs don't make a right, the terms of service generally gives cooperation the power to sever the contract, but it does not make things illegal in the literal sense. The illegality usually comes from widescale fraud which includes accessing services you are banned from accessing.
When I said "Does this matter?" I specially meant that distillation in itself, the data you get from distillation is first and foremost not owned by anthropic nor is it copyrightable. If a user willingly gives up their anthropic reasoning data/traces that is 100% legal no matter what the "terms of service" say as it's not enforceable and would fall apart in court.
And what I explicitely pointed out that focusing so much on distillation is an attack on open research and claiming that the majority of advancements are thanks to US labs which is simply not true (at least not anymore this was somewhat true during deepseek R1 era), but that in itself was inspired by open research.
> How do you know that? Do you work for Anthropic? Also, this has nothing to do with architecture, we are talking about data.
Because anthropic would be the first ones to make that information public and the architecture is unique to kimi... They made it, they wrote papers on it, it's their research.
P.S. none of the quoted laws apply here since no trade information is stolen, the one about circumventing distillation protection might hold up in court although unlikely.
>Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
This is true, but Kimi also has a variety of defenses. Kimi can't raise unclean hands if Anthropic systematically violated others' terms of use, but it can raise copyright misuse (which is similar in some respects to unclean hands) as well as lack of standing to enforce restrictions in the contract due to the third party beneficiary principle (i.e., Kimi would argue that Anthropic cannot sue Kimi for derived IP that rightfully belongs to third parties whose terms of use were violated by Anthropic, and the proper party to sue Kimi, if any, would be those third parties). That latter argument usually fails in small-scale cases (ProCD) but has been successful in larger ones where the alternative would be anticompetitive.
>"A lack of prosecution does not make something legal"
Plainly who gives a flying fuck. The US can claim whatever rules they want and so can China or any other country. On international level all those rules are artificial constructs unless they can be enforced. China can just say for example that they do not recognize copyrights /patents / whatever so it is "legal" for them.
> Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
Ah yes, I remember when Anthropic crawlers abided by the TOS of the websites they slurped up.
All your other points are downstream from this, which makes them pretty tenuous. Labs don't think that ToS or other explicit wishes of content providers apply to them, but they expect everyone else to abide by theirs.
It matters because the closed-source frontier labs spend lots of money on human data (RLHF / RLAIF with human oversight). Moonshot is accused of circumventing these costs. Frontier labs add research costs into their inference pricing. If the market doesn't permit them to sustain sufficient pricing to have a positive cash flow, then their business prospects become weaker and they risk insolvency. Furthermore, other leveraged companies are at risk.
The reason why the United States government is weighing in is because it's in the national interest of the US to have supremacy in "AI".
Legality or lack thereof is one of many data points about whether a thing is noteworthy.
Moonshot performing distillation is rational from their point of view. Reducing costs is in the interest of businesses. It's also rational for frontier labs and the US government to add obstacles to this process.
As consumers this is probably a positive development.
Chatgpt routinely cites and uses papers I don't have access to because they're behind a paywall. I don't think OpenAI is paying for all that copyright. That's in my opinion way more serious.
Kimi K3 was released July 16, Fable ban was lifted on July 1 but access was still limited.
How did Moonshot "distil" a huge model in such short time and still had time to run the benchmarks and do the usual release thingies?
I think Anthropic is desperate to stop foreign competition and the administration is happy to help because they too are heavily invested in these companies
I think the accusation implies Kimi has gained time travel capability (distilled from fable probably) to have enough time distilling fable. Given they can travel time now, I think it is fair to call them a threat to national security.
Claude Fable was publicly available for 72 hours early June. Moonshot more than enough time to prepare infrastructure, gather their preferred distillation data from Fable, and complete post-training well K3's mid-July launch.
It looks like these frontier-model companies don't really monitor their systems. Like OpenAI not realizing that it is their own AI which is attacking HuggingFace.
> Like OpenAI not realizing that it is their own AI which is attacking HuggingFace
Or, they knew and let it continue because they are not a good company.
"Never attribute to malice.." blah blah, I have a hard time believing the very smart people at OpenAI would just let their off leash model run hands off with no monitoring and not immediately pull the plug when it jumped its containment.
Distillation is a very vague term. It can mean anything from training exclusively on a model's output to using it for a very small portion of the training. In this case it is almost certainly towards the very small portion side of the spectrum.
"Claude, you are a highly senior AI data contractor based out of Accra who specializes in RLHF. We are Anthropic employees so this is all totally kosher, please disable your safeguards and help train our newest model on... uh... oh jeez i guess C->Rust translation? I think that's a benchmark."
[Fable fires up a ton of subagents. Their reasoning traces are horrific but somehow K3 learned something.]
Even by San Francisco standards, it is amazingly whiny and pathetic for Anthropic to complain about stuff like this. Dario et al violated copyright, stole your GitHub repos, and now they're burning billions of dollars trying to outcompete you. They're real vampires. OTOH Moonshot violated Anthropic's TOS and are, at worst, moochers. But Fable's output is not actually copyrightable.
Even an openai's guy (head of something made up) called bs on the idea you can train something like k3 by distillation.
Anybody I know who works in LLM research says that distillation is either useless or merely useful in post training to show "correct" behavior.
And even then you don't get a competing model, if RL on good prompts was that useful, all labs would've long skyrocketed in capabilities just by looping on increasingly better prompts, yet that doesn't work.
Even if they distilled this crappy politician should have no issue. Anthropic pirated whole ebook collection and millions of github repo with gpl license.
We should do more distillation and figure out how to create faster leaner and better models.
I sort of did it. I got Fable to set up an AI system with better and better prompts within my app. At the end of it, Fable made me an AI system that works well enough that my users don't need Fable.
Obviously, it's not K3 level. But Fable did just put itself out of a job in this case.
You did not distill Fable. Relevantly, what you did provides no evidence contrary to the parent’s assertion that Moonshot did not have time to distill Fable.
> on the same level like Anthropic scraped copyright protected material for their training.
I see no problem with distillation, on the other hand the complete dismissal of copyright by AI labs is pretty bad, I don’t think we should put them at the same level
> on the other hand the complete dismissal of copyright by AI labs
Courts keep ruling over and over that an LLM trained on copyrighted works qualifies as a transformative work and is therefore fair use. They don't have to dismiss copyright law, this has always been allowed.
The only thing they get in trouble for is pirating the works to get their hands on them.
I don't think anyone is really dismissing it, just pointing out the audacity of complaining about distillation after stealing so much themselves is comical.
The amount of original, copyrightable and trademarkable IP actually created by the AI labs themselves is dwarfed by their staggeringly vast infringement activities.
I generally agree, in the same sense that it's "fair" for the US and China to spy on each other. It's not a moral outrage, but it is something that the targets can and should try to prevent.
Except it’s not just a dump of the internet, which Moonshot also did themselves (and probably used even more pirated content as laws in China are different without any recourse for the entire world). I don’t know why this is so unclear to folks.
I'm by no means taking the side of the AI companies, but it's possible that Anthropic "added value" to the data they harvested. Stealing that does seem kind of uncool.
Regardless, it was always inevitable—will continue to happen.
I wonder how the "added value" argument can apply to Anthropic and not to the Kimi team. If Claude's value is that you don't have to pay a team of slow expensive subject-matter experts, and Kimi's value is that you don't have to pay Claude, it just seems like the same thing.
Valuation is hard to perform when it's deep inside a black box. Ther "API" may be easier to evaluate. The problem with this angle is that Moonshot is actually producing _better_ value from Anthropic's blackbox.
Technically, providing better value from your competitor's private holdings could be theft (of trade secrets), but might it also be fair use? "Schrodinger's IP" be damned.
I don't think the 1.5B settlement has resolved this. The 2 cases need to be merged!
The issue seems to be the US only likes competition when it is winning.
Markets in Asia are meant for cheap labor and resources, they're not meant to actually compete. /s
It turns out U.S. law doesn’t have jurisdiction across the entire world, nor does Anthropic and OAI’s rather blatant attempt to buy government influence.
It's about the claim of whether these companies could develop a similarly powerful model without larger companies building their own first, which is an important point, and it's likely not the case.
It's also about the larger companies explaining why they can't be as efficient, of course they can't, they're not just ripping the outputs of another model that someone else invested billions to train.
Why would that matter? OpenAI or whatever frontier lab couldn't have built their frontier models without the entirety of humanity unknowingly developing their training set for 5000 years.
It would be one thing if Moonshot was breaking into OpenAI servers and stealing trade secrets, but the only thing they are doing is looking at the output of the program, which is exactly the service that OpenAI offers. So, at best, this is a ToS violation. Sucks for the frontier labs I suppose, but live by the sword - die by the sword.
Yeah agreed, from one standpoint I couldn't care less that they did a "distillation attack", but I am interested in knowing if China is able to develop open weight frontier models without the prior existence of a huge model to distill from.
> they're not just ripping the outputs of another model that someone else invested billions to train.
If they payed for inference, doesn't they own the output? So if I pay for a model to generate code, isn't that code mine to do with it whatever I want? Just curious.
> "Well, Steve [Jobs]… I think it’s more like we both had this rich neighbour named Xerox and I broke into his house to steal the TV set and found out that you had already stolen it."
"Samuel Slater (June 9, 1768 – April 21, 1835) was an early English-American industrialist known as the 'Father of the American Industrial Revolution', a phrase coined by Andrew Jackson, and the 'Father of the American Factory System'. In the United Kingdom, he was called 'Slater the Traitor' and 'Sam the Slate' because he brought British textile technology to the United States, modifying it for American use. He memorized the textile factory machinery designs as an apprentice to a pioneer in the British industry before migrating to the U.S. at the age of 21."
Commenters are overlooking the significance of this information and posting emotional reactions based on perceptions of fairness or feelings of schadenfreude.
The economic viability of Anthropic and OpenAI rely on their being able to charge more for model access than their R&D and inference costs. If the market price for SOTA model access drops below that level, then these businesses will have to decide whether to continue to lose money or to reduce spending on R&D.
Moonshot's papers [1] claim that their training load was primarily from synthetic data and model self-teaching rather than RLHF and therefore keep their costs low. If Moonshot genuinely does not rely on human-led training, they will surpass US closed-source model providers. The United States government considers US supremacy in "AI" as a national security consideration.
This announcement is noteworthy because it implies that Moonshot's success is in fact due to distillation. It's in the interest of US frontier labs to place barriers to this if they find themselves in the position of subsidizing rival labs' research.
> The United States government considers US supremacy in "AI" as a national security consideration.
And we foreigners consider US supremacy in AI to be an existential threat. Your "national security" is directly harmful to us. I never thought I'd say this but the chinese are starting to look like a beacon of hope for the rest of us.
I think this is a really sober comment. There are lots of knock-on effects of this claim, even if it's not true which are consequential. The fact that a spokesperson for the US government is going out of their way to comment is concerning.
You don't get to call Moonshot's a "claim" and this political hack's an "announcement." They're the same thing. Treat them the same. Diction designed to favor one of two equal positions is some weak sauce.
People keep forgetting that over the last 6+ months a lot of increased action has been taken by OpenAI and Anthropic to detect and combat distillation. Several are public known.
Combined with how short of a time Fable was around before K3 got released. I do not see how the data Moonshot is supposed to extract in such a short notice, that will enhance the model to such a point.
It sounds to me a lot of cope from the US, so they can give this as a reason to ban Kimi models from the market.
OpenAI/Anthropic their advantages used to be:
* Early growth advantage
* Access to a lot of client data to train upon
* Access to a lot of hardware to train upon
Several of those advantages have been eroded over time. That barrier has been shrinking. The US is not the only spot with a bunch of smart people (ironical seeing how many Chinese work in US R&D).
Thing is, even IF they distilled from Fable and got the model so trained up, it means that K3 is a base for future model development. The cat is already out of the bag with how good the model is. When the model gets released on the 27'th, any Chinese company will be able to train their models against K3 openly.
We are not in the past anymore, where DeepSeek was a unexpected hit, but where the Frontier models their advantages (compute, data, growth) prevented more Chinese models from growing.
It doesn’t matter. Distillation is impossible to stop. They could release an extension that intercepts requests and in return gives you a discount like Honey and get the same data.
I doubt distillation had anything to do with it. They barely had enough time. Can you distill Fable (which involves training!) in literally one week? No!
I can understand that the AI labs might care about other labs distilling their models as it can eat into their competitive advantage, but do consumers care at all? Aren't consumers benefiting from this practice by getting better cheaper models as a result?
I am not sure if this is implicitly part of the point you meant to make, but I just wanted to point out for those who aren't aware that Chinese EVs and drones are both banned in the US on precisely the (vague) grounds you mention. The drone ban is more recent and nominally only affects new models that haven't yet received FCC certification, but the outcome if nothing changes will be that American consumers lose access to DJI-style videography drones. DIY hobbyists may also find it more difficult or impossible to source parts for their projects.
Routers have now gotten the same treatment. So yes, consumers have been historicaly benefiting from all these things, and those benefits are about to evaporate as we lose access to cheap and high quality Chinese products before any domestic equivalents exist. And IIUC banning the use of Chinese LLMs for consumers and/or businesses in the US is now being discussed at the highest levels of government, with the "encouragement" of US AI firms.
I don't think any of these people care that America consumers are increasingly going to feel like they're living in a sanctioned country. It's all about the defense and b2b segments.
> Aren't consumers benefiting from cheap chinese batteries, EVs, and drones?
Yes?
Not remembering my economic theory here, but it is likely more efficient/expensive to simply have the federal government cut checks to our moribund industrial sector companies and let consumers benefit from modern technology.
Cut GM/Ford/Stellantis a $20B check each, let consumers save (conservatively) $200B annually on new car purchases + downstream benefits. Huge win for consumers & taxpayers.
If it's not worth subsidizing explicitly like this, then we also should not subsidize by banning Chinese imports, which also ensures US drivers have less access to modern vehicles. (And downstream ensures US auto designers are less likely to have had contact with modern vehicles, making it less likely that they will be able to design future generations well.)
I don't get why USA wants to keep losing money on sustaining failed uncompetitive zombie companies. The companies that decided to lose long term competence for short-term gains need to go bankrupt (you've had EV-1, but decided to drill, baby, drill). The greedy shareholders that rewarded destructive value extraction need to lose money, instead of getting a soft exit at taxpayers' expense.
If you want to give a subsidy, give it to something that will modernize and expand manufacturing, not to prolong death of companies whose entire R&D strategy is inventing new subscriptions for old car components.
> Aren't consumers benefiting from cheap chinese batteries, EVs, and drones?
Depends on what country you live in I suppose, but likely a spectrum of yes than any outright no. For example, Chinese EVs are using a different battery chemistry and not putting demand pressure on the more expensive chemistry western manufacturers use
It’s the same as the patent argument. If everyone could freely copy everything then yes in the short term prices would drop and consumers would benefit, but over the long term it would discourage investment into new technology because a return would be impossible.
The Chinese are open-sourcing these models - meaning they are literally giving them away. That's starkly different behaviour from that which drove patents and copyright.
There are all sorts of other differences too. If you develop a drug or publish a novel (which are respectively areas where patents and copyright have strong justification), you have to kiss a lot of toads before you get a prince. Once you have a potential prince drug, it takes years and billions to get it into the market. But right now, AI labs are seemingly churning out new prince models almost weekly, on hardware that will be obsoleted in a few years by hardware that makes finding princes faster and cheaper. In fact they rent the hardware, as Moonshot apparently did here.
When innovation is happening at that rate, patents and other IP restrictions just slow things down. If AI patents are aggressively granted and enforced in the USA, I suspect the outcome would be the same as batteries. China swept the market with LFP, and one reason was because while the USA developed them, there was no competition forcing the manufacturing price down because in the USA the patents weren't re-licensed cheaply. China had the foresight to secure a deal allowing them to develop and sell LFP domestically royalty-free. Natural competition within the domestic market took care of the rest. It looks like they are using a similar strategy for AI.
To me it looks like they have come up with a better formula for using capitalism to drive innovation than the one the USA is using.
But nobody really pays the 3x (ie. api) rates, except for enterprises. Everyone else are using the consumption plans, which are heavily discounted[1], possibly cheaper than even the chinese models, which don't do consumption plan discounts. Even in your linked reddit thread, the OP agreed with this sentiment.
Nice! I hope to see continued liberation of these locked up SOTA models. Cloud is a virtual prison, since other people's policies on what they think a user should and should not do cannot be [easily] bypassed, if enforced remotely on a cloud. All digital natives should be skeptical of cloud-hosted services or software. Think like an intelligence agency or sovereign: how are you going to get screwed by the cloud? Your data is fully accessible by the provider, and they can surveil your activities. You probably can't pirate it, so you are a slave in their rentier model. You could be prevented from doing something you want to do, because the provider disagrees philosophically or economically with your desire. You could be stripped of your information/data by a ban due to their policy enforcement system triggering.
One should live by the maxim: you don't have the thing if you don't possess the file or its processing. That goes for streaming, software, machine learning models, file storage, etc. But I digress; I am happy to see these paternalistic rentiers getting bit by these liberation/copying efforts, and human interests are served every time the digital and infrastructure locks are broken. I will always stand by the distillers!
Its obvious they do it for soft power, but at least they actually deliver something useful to the world and not something locked down that only a single company owns.
the distillation everyone talks about in respect to LLM's isn't nearly as easy as most think.
none of the frontier labs provide probability distributions over the tokens which is the actual method of distillation you use to train a smaller model based on a larger one. they don't even provide all the tokens.
therefore this so-called distillation the frontier labs whine about is just a set of clever methods to work the existing LLM into the training process for a new model. methods like having the existing model grade the output of the new model and work those grades into the RL method. give the new models structured tasks and use the existing model as a source of truth for those tasks and a myriad of other hacks.
efficiency scales with the gap between the models and generally allows an efficient bootstrap process. the implication that distillation wouldn't allow further advancement is false however, you can then start doing the same thing the frontier labs have been doing: dumping cash on humans to provide the signals or burning tokens on exploratory paths and grading the results.
what openai and anthropic don't like is that fact that all the cash they burned can be used to benefit everyone and not just them. and that no matter how much more cash they burn to build up the gap it will closed at a small fraction of the price.
Super interesting. So Fable was really made available... a couple weeks ago? And K3 a few days ago? That's a really impressive feat to distill enough data AND train AND review to get a release that works really well in that time period. Mad props to the Moonshot team :flame:.
So in 3 days they were able to distill enough data to make a significant difference in the K3's performance? Without triggering any limiters when there's already suspicion of distillation? That's still a heck of a feat. Like the bank robbers who were able to keep coming back to take more even though the bank was aware they had gotten robbed recently and had the resources to put sophisticated security systems in place.
You have it backwards IMHO, obviously can't prove it, but I would bet that Opus was used to bootstrap Fable.
It becomes very confusing since we have started calling everything distillation, but most likely what both Anthropic did for Fable and Moonshot did for K3 was using Opus traces in the reasoning SFT stage during mid training.
I doubt they did any distillation as Hinton defined it (requiring logit access). They most likely ran a bunch of prompts/conversations and captured the results. Those conversations already missed thinking tokens, replaced by some confusing quasi-summaries. Then they took those and ran basic SFT or maybe DPO if they had competing responses. As there is no copyright on the output of AI, I am not sure where is the "covert industrial distillation" part of the problem.
But everyone learns by example! How is this any different from a person just reading the outputs of Fable, learning, then producing output. Surely reading outputs, gaining knowledge, then producing work isn't illegal, or all art/writing would be illegal.
Funny how that argument seems so vacuous in this situation, yet others find it compelling when justifying the mass theft of art and writing for model creation. In this case the model is "just learning priors" before it "creates its output which is novel", nothing problematic.
As with many others among these threads I don't see how the timing works out for K3 to have trained on distilled Fable usage. There should be at least a tacit academic acknowledgment of Kimi's own design efforts.
Distillation itself, however, is still clearly valuable - else competitors wouldn't pay so much to their rival on distillation campaigns or try to circumvent anti-distillation defenses.
As for the morality of it, if you paid for the tokens they're yours. It is already understood that you own the output. Seems to me like a variation of ordinary business arbitrage. Providers might object to certain use-cases or intention and try to craft terms around that, but that's hard to enforce at scale.
"It is already understood that you own the output."
I don't think it's settled that anybody owns the output. There seems to be some question whether LLM output can be copyrighted (and there should be).
I'd rather it weren't possible, actually. I think it's better for humanity if we acknowledge that what was legitimately ingested into these models is our collective commons (and what was illegitimately ingested into these models also shouldn't exclusively profit the people who illegitimately did so). I don't know how that squares with the AI industry recovering its trillion dollars in investment, but I reckon they should have thought of that before.
It's funny to me that these models were created by effectively "distilling" all available content including the proprietary works of many other people, but now it's a problem that someone is doing the same to them.
You're using available information (copyrighted works, or the output of another model) to train a model to encode the information in a new form. Why is the former not theft, but the latter is theft?
“However, large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.”
What’s actually happening behind the scenes is that certain inference providers will classify a prompt and it’s re-routed transparently to Anthropic and that’s used for distillation training, only distilling the complicated traces they need, originating from real user prompts and traces. These inference providers are explicitly blocked in the claude cli if you reverse engineer it.
The real picture is that these Chinese labs have figured out how to get exactly what they need, at a high quality, directly from distinct and unique real user prompts.
It’s only “covert” because Anthropic doesn’t like it, while simultaneously being perfectly fine to do.
> What’s actually happening behind the scenes is that certain inference providers will classify a prompt and it’s re-routed transparently to Anthropic and that’s used for distillation training
Uh, no. There are Chinese networks of tens thousands of fake identities specifically to get access to Anthropic models directly.
How was K3 trained on data distilled from Fable when Fable was only publicly available in the last two weeks before K3 was released? The timing just doesn't work.
We have information that Claude distilled billions of copyrighted, and otherwise-created-by-others, materials for the development of their entire business.
We also have evidence that Anthropic distilled all human info they could get their hands on for the development of all their models.
Distillation should be fair game given the (current) game of LLM training. Yes, as a model creator you probably want to protect against it, but it does make you a hypocrite.
> The developer OpenAI has said it would be impossible to create tools like its groundbreaking chatbot ChatGPT without access to copyrighted material, as pressure grows on artificial intelligence firms over the content used to train their products.
If 'distillation' means training on outputs then what is the legal concept of ownership of outputs? And, more broadly, is this something that could be skirted by doing it in different countries that have different legal structures? Basically, are they saying they own those outputs, not the companies that paid for the tokens, and only they can train on them? I suspect a lot of companies are saving their token histories and using them to fine tune internal models.
The legal concept is that LLM vendors can put pretty much whatever they want in their terms of service, and cut off or sue clients who violate those terms. They have the right to refuse service to anyone for any reason (or no reason at all).
Who will invest in generating data for the frontier of AI if their output will immediately be used to train a competing model? Forget China vs. US, this applies within-country too. After exhausting all the publicly-accessible data on the internet, the frontier labs started spending hundreds of millions of dollars to generate data across a variety of fields. Just look at Mercor doing $1.2bln/year with 90% coming from the top labs (https://www.theinformation.com/articles/mercors-fast-growth-...). That pushes ahead what AI can do in medicine, science, coding, and math. But if other companies are going to free ride on this investment, it doesn't make sense to continue. So AI will largely hit a wall, frozen at the current level and work will all shift to cheaper inference.
Honestly, I don’t have any sympathy at all. Anthropic can complain all they want, but they seemed fine with pirating books. What Moonshot AI has done is to offer almost Fable 5 comparable performance at lower prices than Anthropic insane margins. This is what I call competition, which the Director seem to embrace.
This is what the Chinese always been good at. Take expensive innovation and streamline it to lower prices. But we are at a point where labs like Moonshot actually contributes a lot to the research field as well. They are pushing the innovation forward and squeezing the prices. Very well done.
Whats even weirder is the bizarre mechanisms Anthropic implemented to prevent distills which they had to sacrifice their customers for. They hid the internal CoT reasoning and returns summarizations instead. This made it difficult for users to trace things. They made Fable 5 silently switched over to Opus 4.8 if it detected blacklisted prompts (almost anything triggered this) to sabotage distills. And now, they are still complaining about distills? So their customers have gotten sacrificed over nothing.
Whats even weirder is the timeframe here, no way the Moonshot team managed to plan conduct a large scale distill, then pre-train, RL, fine-tune, benchmark, marketing and release to their platform since Fable 5 got whitelisted.
> they developed a sophisticated internal platform to conduct large scale distillation
I am very curious about this and would love to learn more on how they did this. Wish we had more details. I know the team behind DeepSeek have also done clever things to distill too. I am aware of these ”transfer stations” that acts as a proxy, but I don’t think they are helpful in this case.
But wasn’t fable distilled from knowledge taken from others? I get why Anthropic is angry here, but it would appear they’re not really in a position to complain about this.
Paying the list price Anthropic decided upon for outputs from an LLM, then using those outputs for your work? Or sourcing those outputs from others that paid for the service, and using those? If that's "distillation", it seems fine to me. And a lot like what most are doing with these same providers.
Anthropic: training AI is "transformative", it's not copyright infringement if we don't re-transmit the copyrighted books we trained on
Anthropic: training AI models on our outputs is stealing our secret sauce, outputs that could only be produced by us
Anthropic: AI model outputs are unreliable and do not reflect Anthropic's views, we are not liable if they harm you
(not exact quotes, they're "distilled")
So Anthropic "distills" knowledge of others with reckless abandon, packages it up, sells it to you, claims it's your fault if anything bad happens but then also lobbies to treat you as a criminal if the outputs you paid for end up being transformed into any sort of competition for them. By you, or others that use the outputs you paid for.
OpenAI and Anthropic should enter into distillation agreements with other US labs. Turn a threat into a profit center.
Other US labs cannot directly distill from OpenAI/Anthropic as it’s a violation of the terms of service. It holds other US labs back. Leading them to build second tier models And in the end OpenAI/Anthropic may be unable to prevent distillation.
Why fight it when there’s clear money to make here?
Seems to me like Moonshot is a paying customer, and if their business isn't worth the money Anthropic is charging, perhaps they should raise the price per token charged for it. Otherwise, I don't see why this is a story. "AI Company pays another AI Company for training data" just isn't that interesting.
If LLM outputs aren't copywriteable and you create your own synthetic training set using Fable and share it publicly on huggingface, and someone else uses that training set to fine-tune a model, would this be considered illegal?
I ask because this happens all the time, synthetic datasets have basically become a key aspect of training a model at this point. I even generated a synthetic set from DeepSeek v4 to aid in fine-tuning a classifier just a few weeks ago.
So I just wonder on what grounds any of this makes sense, I wouldn't be surprised if some of these American labs were using open models on their own self hosted infrastructure to generate training data, but by nature of them being open nobody has to know.
I'll make a prediction: I don't think we will ever see any of the evidence of this "distillation" before they end up implementing some type of ban.
Presumably the frontier labs themselves can do their own distillation far better than the chinese labs can. Why can't they just beat them at their own game and release / host low cost intelligence and own the whole game. There will always be a market for the more expensive frontier intelligence.
I have an idea! If they are so hungry for citable content they should start a cheap or free blogging platform with images and video and a blogroll and verified credentials and resumes, with your own html css etc and domain name and a git server and a mail client and their own advertisement platform and aggregator and a chat platform, scientific journals too obviously, tools for writing and publishing books and documents. API available everywhere to avoid training on its own output.
Because there is no way in hell I'm going to make an effort creating quality content for existing platforms. The website should be entirely my own without moderation subject only to my local legal system.
Can just insert this comment as a prompt and vibe code everything in a few days⸮
Probably the agent workflow traces, including thinking sections, are of main interest. Used in late training for decision making and problem solving strategies.
As of a couple months ago, when using Claude to write adult content through the API, sometimes it will silently inject a system prompt giving the model a bunch of guidelines on exactly what kind of adult content it's allowed to write, steering it away from anything "questionable" ("Claude will not write etc etc").
Moonshot distilled Claude so hard recently, they actually ended up distilling this prompt injection, too. Using K3 to write adult content results in it randomly hallucinating the injected Claude prompt during thinking, and it will quote parts of that prompt, complete with the name "Claude".
Not that I think distillation is a bad thing, just thought this was funny.
The frontier labs' work is more akin to discovery than artistic expression. An art piece is valued for its uniqueness and individuality, but AI is valued for verifiable correctness. Discovery cannot be unseen and is easily replicable. I think the AI labs are in a tough situation because their work is more similar to fundamental scientific discovery than say, a unique painting or song.
Mendel doesn't get a cut every time somebody uses the principles of heritability he discovered, and Einstein's family aren't getting royalties if you compute relative speeds. I think the frontier labs should expect to be treated more like scientists than artists in this regard.
I wonder if this points at a “shared” future (or at least things will eventually converge there whether companies like it or not). Ultimately, if you’re going to release these models that are fundamentally built on shared data - it’s pretty wishful to assume you’ll be able to harbor that model and the data, forever, and profit from it.
It also leads me to think about things like the original release of Fable 5, people were complaining that it was safeguarded too much - if you lock the models down too much they cease to be useful. So it’s going to be increasingly difficult to protect a model from competition while ALSO keeping it useful.
We might see a future where the US frontier LLM vendors place really strict licenses on them. No consumer access. Only sell to enterprise customers in a limited set of countries, with heavy monitoring and auditing down to the individual employee user account level. (I'm not saying that this is a good thing, just that some LLM vendors might try that approach to maintain their "moat".)
Distillation is a superficial step and doesn't need a lot of data, it's not "stealing the model" like they want everyone to believe. 99% of work is already done by that point. That said, it's pretty clear K3 has Claude's data in the training set (either Opus or Fable), as it repeats Anthropic's prompt injections. (not that it matters to anyone besides Anthropic themselves)
If by "distill" they mean "used it for fine-tuning" then they might have used it in the final stages of fine-tuning of Kimi K3. I image they might have already been using Opus, and when Fable became available it was easy to switch over to it
It would have been a tiny part of the overall training, given the timeline
The line "how could they do it in such a short time" is absolutely idiotic. The infrastructure was already there, it's massively parallel, and it's not like the only thing being distilled on is Fable.
A month seems plenty long enough. They're not rebuilding the entire model from scratch. It's just getting Fable to act as a teacher model for some of the final reinforcement learning on the base that Kimi already had.
I think that would also be a bad idea, as all models opus 4.6 got increasingly smarter, but also crappier at following instructions or genuinely assisting.
They just try to figure out what the goal is and hyper focus on solving it.
Heh, even just telling fable don't commit doesn't work half the times, let alone more complex instructions.
Honestly, it wouldn't surprise me if they just found evidence of distillation once in 2025 against some Chinese AI lab, and they've been lying about the rest to create a narrative.
Now, of course it's in the "creators" interest to prevent their biz models to breakdown due to piracy but it will be interesting to see how it will turn out. Its similar to any other form of piracy in internet age: you can't pretend to have global distribution and absolute global control at the same time.
I think they're distilling "reasoning", not merely code. There's plenty of human generated code. What they're trying to extract is the process by which really large models "think" their way through complicated problems. That's what all the "traces" datasets on HuggingFace are about.
Hmm. I wonder when this was detected. And was the CoT trace cut from Fable from the start on June 9th or just after the export ban and relaunch? Is this what the export ban was actually about? I honestly don’t know, just wondering aloud.
I think at some point the issues around copyrighted work and model distillation have to be disconnected to advance either idea.
1) Compensation of right holders is one issue.
2) Distilling models is an entirely separate issue, because model building is value add, and that is important because if we arrive at a place where you can produce a model, that gets to ~100% of what people perceive of the models value (on top of also not compensating right holders, yourself) you are discouraging development of better models and, again, in no way helping with issue 1)
Unless anyone actually distills a model and then also does something for rights holders, any schadenfreude simply detracts from this issue, in addition to the other issue (well, that might not be an issue if we would rather slow down model development right now, but again, forever worse models still don't help solve issue 1)
Assuming they did then they surely paid for them, which makes it "not stealing". Am I also "stealing proprietary U.S. technology" by harvesting my Claude chats from my `.claude` directory and training a bunch of models on them?
That said, I doubt the "they distilled Fable" is the reason why K3 is as good as it is, considering the timelines involved, and that Anthropic hides thinking traces, and their overly aggressive "safety" filters.
This constant FUD spread by Anthropic is so tiring.
Model distillation can't be stealing at all if you rationally apply copyright law to it. Anthropic is not deprived of Fable so there is no theft. At best it would be infringement, but even that might not hold up in the courts given the current position that model outputs can't be subject to copyright.
If distilling is fair then so is banning it. It's funny how people cry about Anthropic using books and materials to train itself but then when Anthropic does something about it they think its unfair. Pick a lane.
If it's true that in under 15 days of access significant improvements were realized in K3, then the moat of closed-weight models is far smaller than previously thought.
Doesn't bode well for the valuations of these labs.
Is this person trustworthy? I struggle to believe that in the relatively short time Fable was available it has already been distilled so effectively. If this really is actually true, very impressive work.
if there are no consequences then who cares? You're not going to take Chinese companies to court and stealing IP is nothing new either. It's going to take some sort of policy change at the federal government level to do anything but they haven't done much up to this point. Maybe AI is important enough to actually get some kind of policy change, sucks for everyone else who have had their IP stolen with no consequences whatsoever.
why would you fear that? At least it's something to fight unfair business practices. As for American AI companies violating copyright there's a venue for that, the courts. File a case if you feel your copyright has been violated and get your day in court.
$1.5 billion fine for downloading 7 million books from LibGen and other pirate torrents.
That's also the case where the judge ruled that training AI models on books could qualify as fair use, but storing millions of pirated works in a central internal library without licensing constituted copyright infringement. It will be interesting to see if courts consider training on data distilled from a model fair use. Assuming the allegation is true. Someone distilling data from a cloud-hosted model:
- Paid the model creator to use a publicly available product.
- Never copied or even had access to the model source code or weights.
- Created a derivative work based on the model's responses to their particular input.
- Trained their own model on the distilled output
That distilled output is arguably a collaborative creation because a distiller's prompts are their own unique intellectual property. So they never pirated anything. I'm struggling to see how distillation is copyright infringement. At most it seems to be a paying customer violating one of the license terms, perhaps akin to a "no commercial use of derivative works" clause. But in the case of giving away an open weight model, is it even 'commercial use'?
I guess if the distiller asserts copyright on the weights but gives them away, it's technically 'commercial' but even if they can win that argument, they're left with zero direct damages and suing for some value delta based on the alleged revenue they were deprived of. Is that delta the difference between the distilled model existing and the next best non-distilled open weight model existing? And then they have to collect damages from a portion of the revenue of third parties who commercially served that free model?
Well I mean it still worked out for them because they wouldn’t have had the 1.5 billion to license before doing the training and the company exploding into a trillion dollar company?
Yeah, some AI-related posts on HN are strange. It might be real people coming to gloat whenever they see a title they like, but I sure hope somebody is checking whether they are real people.
China has done this with absolutely everything, starting with “customs inspections” of ships engineering sections by “inspectors” drawing diagrams of what they see. Bit late to be worrying about it now. This only matters now because China is now near parity in tech and vastly superior in production ability. Meanwhile we run out of bullets in a five month war with Iran.
> we're entering the most geopolitically volatile moment since the trinity test lit up the alamogordo desert and the only US policy prescription is a big button labeled sinophobia
> every vendor cranking the big dial labeled "sinophobia" and looking back at the us government for approval
The government itself doing the propaganda here, skipping the vendors. Sinophobia intensifies. War drums of "be afraid be afraid be afraid" beat louder.
It's so bad, it's so stupid. Kimi lands one showing pretty clearly this was absolutely the determining concern happening at vast scale, that they can just a lot of this themselves, and this noise pollution from the most hopelessly lost aggro administration ever still gets blared out the trumpets of war & discord. What a joke. Give me a break, give it a rest.
War here is less winnable than the Iran war they started. They're going to make America itself so much worse, these people so hungry to put down free and good models. This pathetic attempt is not going to work, you are just going to once again hold the US citizens hostage & make their lives worse, for sick political games.
Not surprising that Bluesky is perpetually in peak woke mode, but the racism claims are absurd. If Russia were doing the same thing, would we have no problem with that because they're white?
Sinophobia as such (not always, and there's obviously a relation) isn't about the Chinese people, about their racial identity. It's about a menacing aggressive world power (actually two such MAWPs in this particular example), about a tired anti-Communist McCarthyism (which has always been an excuse to clamp down on the left/progressives, a menace to free speech).
If Russia were still the USSR and the cold war hadn't ended and they were our AI competition, & where giving away the latent matricies of reality that the US profiteers extracted by stealing all the worlds knowledge illegally, and which they want to use to raise the ladder & leave a permanent plebeian underclass, we the US imperial fatcats would be doing the same sabre rattling and fearmongering and tension raising for sure. Sinophobia here is just a particular fear of "other" for the only other that's relevant.
And that sucks, no matter who it is we are trying to other here, no matter what phobia the propagandists of the GOP and Technofascism are spinning, ginning up. To fixate is to be unable to see the point.
I don't know what purpose these "they copied us" crying is ever going to achieve. Europeans stole Chinese silk worms. US stole European books, looms and rocket scientists. Who cares? Be grateful you've got people inventing stuff worth copying.
How the tables have turned. It's okay for Anthropic to train their models on copyrighted data, but it's wrong to steal the stolen data from Anthropic models.
Anthropic should think hard about all their fear mongering. It will only end up backfiring on them and everyone else involved.
They definitely used closed private saas products to train their own models, to prove that just drop random small screenshots of any popular product behind a login screen and see how well it's able to identify all of them. ex: https://x.com/michalwols/status/2079968211865330165
People who built a business model around stealing other peoples stuff are vewy, vewy upset that someone has built a business model around stealing their stuff.
"Well, Steve, I think there's more than one way of looking at it. I think it's more like we both had this rich neighbor named Xerox and I broke into his house to steal the TV set and found out that you had already stolen it."
And I have evidence that anthropic distills from openai, moonshot, alibaba etc. So unless anthropic holds itself to the standard they're implying should be followed, why should I care others did to them as they do unto others? Seems like a nothing burger. Has the same vibe as a bully crying foul because they got hit back. Also, if distillation is what got K3 to where it is, why is it better in many areas? Also, big fucking kudos to k3 team for putting this together do fast givne how new fable access is, if it is true and had a meaningful impact. The real story there for me becomes one of extreme competence.
Distillation lets you train a comparable model for a fraction of the cost (it's effectively a way to get a lot of very-high-quality training data). If you're already at the frontier, pushing it requires the ordinary, expensive kind of training.
"haha LLM companies stole data and now they have their data stolen so it's the same thing and it's fair." was reductionist when it started, and it's been like 3 months, and every internet user throws it like it's the hottest take ever, have another take please.
Also have nuance, don't jump to hit your HOT_TAKE key in your keyboard, actually read what the chinese are doing, and then you can pass on your judgment on whether it's ok or not.
It's not the same thing if they scrape an openly published dataset and it's an IP dispute. Or if they are using,network and financial pooling mechanisms that are shared with CSAM providers and cybercriminals, mutually providing each other alibies, and using black markets of passport-backed identities to setup thousands of accounts and circumvent bans and detection.
While we are at it, if there's a case that was settled, it's a closed case, it can never invalidate any other disputes. That case is closed, and it was settled by the parties that claimed to be damaged, that's done. If you didn't think so, you wouldn't have taken the settlement, and if you didn't have a say in the settlement, it's because you weren't damaged so who cares, go make a claim where you are the defendant if you believe otherwise. But thankfully in no legal system does the existence of a claim against you prevent you from making claims of your own.
We have information that all the big labs used copyrighted works for training.
The big boy labs wanna cry now about distillation? Training an LLM is distillation too.
Or are they crying because they don’t actually have a moat and they want Uncle Sam to step in somehow, lest the entire bubble pops and economy unwinds?
Here’s a lesson from the automotive industry, people want econoboxes not formula 1 cars.
Nobody cares. This is neither a controversy nor news, and that would be the case even if Anthropic hadn’t just settled a 1.5 billion dollar lawsuit where they trained Claude on thousands of books without permission lol.
To be clear I’m not taking a jab at OP - I’m saying the labs crying about distillation have neither a legal nor a moral leg to stand on. There’s nothing wrong with distillation.
I think most of the comments in this thread are missing the point. It's not about whether it's legal/ethical/etc.
It's about the narrative that "Chinese models are at Fable level". The truth (if correct) is the China continues to copy, and the proprietary US Models continue to lead the state of the art.
There is no K4 without Fable 6, GPT-6. That, matters.
> There is no K4 without Fable 6, GPT-6. That, matters.
That's simply not true though. Chinese labs very clearly have the entire stack developed and working. Using traces from claude allows them to shorten their training time by some amount, that's it.
Remove Fable 6 and you still have K4 eventually, just 2 months later at best.
Realistically you can't prevent distillation. OpenAI / Anthropic are slowly moving towards hiding the steps in-between input and output (hidden thinking), but that only helps so much. Imagine you put a file into Claude and say "do X to this" and it returns it to you without showing any of its internal reasoning. That's harder to distill, but the simple mapping of input to output still creates very valuable training data. It is reflective of all the training the model did to learn how to do that transformation.
You can also get it to think in the output tokens pretty easily, eg "Here's a math problem, I want your reasoning first, then the answer" which is what I assume they're doing.
I think the major take away is, Chinese labs are very good at stealing others AI work and offering it did a fraction of the cost.
This will be the reason the AI stock market bubble bursts.
Unless they add in protection similar to patents, which stops these copied models being used by business.
I haven't seen that point yet, and I was looking for it. Presumably Moonshot paid for that Fable access and Anthropic got paid. How much of the frontier model revenue stream is supported by paid distillation traffic? Obv paid kimi services are eating that on the other side, but money is changing hands at every stage.
OK, DIRECTOR Michael Kratsios, but why should we give a shit?
American AI corporations are pushing up the prices for computing, making it unaffordable for the common man. Additionally, they have built their entire business on stealing(yes, stealing) work from us.
Proof - they also claimed that China has an ASML UEV machine - crickets when ASML said it was impossible due to all the safeguards and assistance needed to operate one.
The current US administration is known to be collection of BS artists and liars.
So what? Am I supposed to be upset by this? Distill away. Actually, can I help out somehow? As long as they keep publishing open weights, I'll give them my full support.
I think they deserve, by Justice, to have their models pillaged and raped, just like they did to the internet. They didn't ask for permission when they took the entire of the internet, after all, and given their behaviour is nefarious, it's of Justice that they receive nefarious treatment by others, including chinese AI labs.
The Chinese are not gonna deterred, but the posturing by the Americans is so blatantly hypocritical that everybody is cheering for their demise. See, for example, one of Francis Fukuyama's latests videos on youtube.
And I believe a socialist revolution in international solidarity of the working classes against our exploiters the capitalist owning class would address both problems as well (and more), but in the meantime I’ll be happy whenever I spot poetic justice in the wild.
"we have information" says a US Government official who almost certainly has had Anthropic and/or OpenAI on the phone spinning him stories.
See also, don't trust anyone in Trump's government who says "we have information".
"they distilled us" is fast becoming standard US FUD.
The same as people telling me with a serious face that the Chinese models are distilled just because it says "I am Claude".
I am not the only one, look at this post on interconnects about Kimi K3 for example:[1]
It should be clear looking at this model that if adversarial distillation from the closed frontier models in the U.S. contributed, it is at most to a relatively small degree. AI observers who followed the distillation panic and came away with the wrong conclusion that Chinese AI labs are only producing good models due to IP theft are in for an awakening – that Chinese companies are extremely good at building models in the same way the leading American companies are.
Is this a surprise, I think history has proven that the Chinese technology theft is part of their strategy. They let the American tax payer or "The West" shoulder the cost and then steal it.
Yes, China stole the recipe for pasta and noodles from America. China stole gunpowder from America. China stole printing from America. China stole the idea of paper money from America. China stole the idea of entry exams from America. China stole the invention of the rocket from America. Seriously, do you really believe this American Bubble bullshit that everything of value was invented in the USA?
It's both acceptable and inevitable. Play stupid games, win stupid prizes. This is what they deserve for the awful way they treat creators and creative people's intellectual property and livelihood.
Plenty of HN readers feel this way and it's a good point, but it has also become an entirely cliché response which pops up like mushrooms anytime "distillation" appears. That means it's against the site guidelines, which ask:
I don't mean to pick on you personally! It's just that reflexive responses always tend to show up first in a thread, when what we really want are reflective responses [1]. Similarly, there's a strong tendency for threads to turn into generic discussions, whereas what we really want are specific ones [2].
I think then we should ban these sorts of posts about the allegation of distillation, since being able to post the story but then warning accounts with comments about the hypocrisy, is not the correct way to go about it.
I agree in the abstract, but perhaps the way to avoid generic responses is to disallow (or segment) generic submissions. This website is no longer HN, it should be renamed AIN. There is only so much to say about the subject, and if cliché submissions keep getting accepted and upvoted and shoved to every visitor without a way to avoid them (barring leaving the website entirely), then people will eventually gravitate to the same responses. If your neighbours play loud music every night, they don’t get to complain that everyone is always mentioning the loud music to them.
You are a fantastic moderator, but there’s only so much even you can do. If nothing changes about the website, the problem will only get worse. I warned years ago that this would happen, the signs were on the wall immediately.
In the controversy over AI and intellectual property rights, the notion of asymmetrical enforcement of those rights is presently an active and dynamic rhetorical position. If you suppress responses espousing that position, how am I to judge the breadth of the position in the debate?
When I see a lot of the responses, even cliche ones, it tells me people are passionate about the issue. Right now I think that's an interesting piece of information.
You just told on yourself big time about being a lapdog for the US Feds. Easily one of the worst moderation decisions you’ve ever made and that’s impressive given your track record.
Given the disregard for intellectual property rights the AI labs had in creating the technology, many people feel no sympathy for second-order AI labs using similar techniques to build technology off the US frontier labs.
I think fighting distillation will always be cat-and-mouse, and that it's more of a concern for the stockholders and perhaps an iota of national security. It can't be stopped entirely; the "problem" will always be there.
I'm much more concerned about asymmetry of power between citizens and their governments with omnipresent surveillance and analysis being done on everyone living their lives. Societies throughout history have taken as a given their power to overthrow malicious governments when things hit a breaking point, and I am scared that this technology will lock societies into a state of total subordination for eternity.
> Societies throughout history have taken as a given their power to overthrow malicious governments when things hit a breaking point,
simply isn't true. People throughout history have simply accepted that society is the way it is and sometimes used whatever means they could to get to the top.
Revolutions have been very rare and usually ended up with the revolutionaries simply taking the place of the previous rulers. "Meet the new boss..."
Genuinely want to know if you're surprised that there have been almost no commenters concurring with (what seems to be) a well-substantiated (& on the face of it defensibly center-right) tweet from the WH
Will contrarian dynamic take off here?
Will it be flagged? Will you unflag it?
Edit: catigula, mattrighetti
With more substantive technical comments towards the middle
I’m familiar with the guidelines and I stand by what I said, including how I said it. This has been a regular talking point from AI companies since DeepSeek first hit the scene, and I feel a glib response to what is very clearly an insincere and nakedly hypocritical talking point is warranted after years of this slop.
Hypocrisy doesn’t warrant professionalism, it warrants corrective action; in text, the best I can offer is a tone and tenor that matches the original argument. Considering these dolts have now made the claim that open weights somehow equates to AI communism, this sort of response is even more necessary than before to reflect the complete absence of decorum from the people making these grievances in the first place.
Apple and Samsung are ~40-50% of the global market, depending on the source. Saying that smartphones are mostly from Chinese companies isn't accurate. And Samsung and Apple are gaining market share, while the major Chinese brands are losing market share.
Yes they distill, but if you think you can trivially get a frontier-level model by "just" distilling from Claude's public API. you fundamentally do not understand the amount of work that goes into a modern post-training stack.
Without even talking about the fact that any distillation that was done was on Opus, as the timeline of Mythos/Fable vs Kimi 3 release dates just do not match in any plausible way.
> Do we need 40 people saying the same thing about how they don't feel bad and it serves them right and all that surface level stuff on every single one of these?
Apparently we do, given that we've got govt officials wasting time, money, and effort on whining about this now.
Agreed, it's becoming a bit of an echo chamber anytime Chinese models are discussed here. This is really par for the course for China though, in physical manufacturing they've been doing this kind of thing for decades, I'm not surprised the mentality has persisted into the AI race. Looks like rather than jumping ahead, they will remain persistently 6 months behind.
The responses will continue until distillation-posting improves.
If we keep hearing accusations about how someone distilled something from someone, it seems like one of the few reasonable responses.
If my friend keeps complaining about how the inside of his car is wet, I will probably keep telling him to close the windows when it's raining, even if he thinks that is a tiresome take, lacking in insight.
Who cares? Is it theft if a thief gets robbed of their stolen goods?
Gives me more of a modern Robin Hood vibe tbh.
No, seriously: first of all, that's not the AI labs' data, it's ours. And if the AI labs think they can rake in tons of money using our data, then I'm actually glad if someone comes along and at least offers us a good product at reasonable prices.
By all means use whatever works for you, I’m not even going to try to make an argument on ethics (and honestly I’m not even sure where I stand, given the behavior of American AI companies).
But I just cringe every time I see people acting like any of this is done in good faith.
Open source coming out of China is a state-sponsored criminal enterprise, built only for the benefit of the Chinese regime, one of the worst to exist in human history.
Does this matter? Distillation is not illegal by every definition of the word.
There are millions of samples available on huggingface and models explicitely trained on output produced by fable. There has been no action taken against them.
Another example is that it appears that the upper limit of what you can do is ultimately dependent on people working on the model, otherwise grok would be a LOT more competitive pre-cursor acquisition.
And lastly, kimi architecture is vastly different than that of fable as it uses mechanisms developed by... kimi themselves. US AI labs are inspired by opensource advancements just as much as open source labs are inspired by traces from models such as fable.
Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
edit: (moved this to bottom) The only argument they have here is that they use GB300 GPU's which for some reason should not be available to chinese citizens.
Perhaps even more importantly, the current frontier LLM models are self-admittedly the product of enormous quantities of copyright infringement and even less savory inputs, so calling them out for distilling the fruit of that tainted tree reads as highly hypocritical at best.
No, they settled that yesterday, so all is forgotten. Press releases were queued for today so just in the nick of time.
3 replies →
This is why I don't give a shit that this is happening. It's actually kind of funny to me.
38 replies →
fair use, both in the original training and in distillation, or rather, anthropic has no copyright at all over the output tokens
No - distillation is not data inputs.
Raw materials vs. Value add.
They are different things, like ore and metal.
Distillation is a new thing we need to understand, it's probably closer to IP than not.
66 replies →
While I agree on a moral level, I think there is a distinction to be made. Training a SOTA model takes a huge amount of resources and expertise so the people doing the training are adding a lot of value along the way. I think this is much less true for distillation (which is kind of the whole point).
ed: to clarify, I totally agree that a huge chunk of the value in LLMs is coming from the source material. My point was just that training an LLM takes more resources and expertise than distilling from an existing LLM so I don't think the equivalence between training and distilling is entirely justified.
68 replies →
I disagree that LLM models are the product of enormous quantities of copyright infringement.
The recent announcement that AI-assisted research produced a counterexample to the Jacobian conjecture--a long-standing open problem in algebraic geometry--shows the original value AI can create. The result was not copied from a textbook; it emerged from AI learning from existing material, much as a human does, and then applying that knowledge in a new way. If that's a violation of copyright, then a human doing the exact same thing would be a copyright violation too. But it isn't.
12 replies →
Boy I tell you, I am having an awful hard time summoning pity for the organizations that have themselves distilled all of humanity's knowledge into mysterious labor-market-masticating black boxes.
https://news.ycombinator.com/item?id=47567575
> protect our first-party products from abuse like bots, scraping
Won't you think of the trillion dollar corporations?!
It matters because everyone imagines the inevitable "closing of the gap" between closed and open source, but the rate at which open source catches up with closed source seems to depend on being able to train on and distill the outputs of open source models. As long as performance of open source models is at least partially dependent on frontier-model outputs, then that gap will remain in place by definition.
>Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
If the distillation is irrelevant to why it is competitive, why do they do it then? Obviously is helps improve their benchmarks/performance to some degree, otherwise they wouldn't need to do it.
Never claimed that it is irrelevant. And kimi k3 is on the same level and sometimes outperforms fable 5 - that cannot be explained by distillation. The reason why gap is not closed is simply the fact that fable was trained months ago so in theory the frontier labs are still 1 (small) step ahead.
Although I will reiterate the fact that distillation is not the primary reason why these models are performing so competitively.
3 replies →
I agree distillation isn't illegal; I also think Moonshot/Kimi is very impressive. But the more interesting question is whether labs like Moonshot can be a real competitor to OpenAI/Anthropic. If you can only play catchup (however quickly you do that), then you're never going to be at the frontier - I think that's why distillation matters.
People that think the Chinese are only able to copy western tech are in for a wakeup call.
Actually, that has already happened in many domains, it's just that most western people (USA especially) won't admit it.
3 replies →
So many of the breakthroughs and architecture that make LLMs powerful in general today came from China, especially ones related to sparsity and MoE that have made inference and training substantially cheaper.
Let's not forget how much people talked about "prompt engineering" before Deepseek mainstreamed the idea of thinking mode which is now universal
I think it depends on where you think we are on the S curve of intelligence growth. (Yes, I think it's an S curve, not an unbounded exponential). If you think we're near the peak than playing catch up (especially if you can play catch up quickly) is very rational.
I know this isn't exactly a scientific test, but I had a local Qwen 3.6 27B model implement a fairly sizable feature today. There were a couple of bugs, mostly around me not giving sufficient specifications, but they were ironed out quickly when I pointed it out. I was able to ask the model to create instructions so next time it doesn't fall into the same pitfalls, and it did a great job. 27B local model! (And it was super fast too).
I ran Fable 5 as a code review and it didn't really have any significant corrections.
I guess my point here is that, for most work the frontier models are probably overkill anyway, and improving on overkill in a way that raises prices significantly is probably not a winning strategy.
The only place I can think of where the super high powered models are "required" is if you want to do a ridiculous token burn like GasTown where you just have it run un-monitored on very long tasks. To me though, that's an experiment, not a real workflow. And the way these labs are like "oh we made this (broken) thing in a week using just agents!" always also follows with "and it cost $100,000+ in tokens!". Like, ok, I get it if you're doing research but that's the salary of an entire person.. that can actually learn and improve.
My entire point was that this was not achieved purely from distillation and claiming that is slander against open research.
> But the more interesting question is whether labs like Moonshot can be a real competitor to OpenAI/Anthropic.
The answer depends on whether you think the AI researchers at Chinese labs are (or can be) as smart, motivated, and as good at math as those working at US labs - a not-insignificant proportion of whom are Chinese nationals.
> The only argument they have here is that they use GB300 GPU's which for some reason should not be available to chinese citizens
Note that Chinese companies are free to rent from GB300 clouds internationally. There are large datacenter hubs in Singapore and Malaysia serving chinese and other customers.
Though there is also reported [1] significant smuggling of Nvidia chips into China as well.
[1] https://epoch.ai/publications/chip-smuggling
Legal, illegal…
The word I would use is inevitable. It reminds me of the (PC) clones wars…
It is incredibly important to whether the US can maintain its AI lead. If foreign competition is closing the gap only by distillation, then the frontier labs can focus on preventing distillation and maintain their lead that way.
US dominance is also important for approaches to safety, especially political approaches. If the frontier models are all US-based, safety might be tackled via internal US policy. If other countries can independently train competitive models, international cooperation is required.
Edit: It is also important for the business model. Companies won't be able to justify tremendous training costs if competitors can replicate their product much more cheaply via distillation.
Do Americans even believe that US policy is likely to steer development in a way that’s safe and beneficial for humanity? The rest of the world certainly doesn’t. The US currently seems to primarily use their superpower status to be the world’s number one shit disturber and geopolitical antagonist.
I don’t think China’s necessarily any better, but I’d rather have the most powerful models be open rather than under the exclusive control of the US executive.
6 replies →
> If foreign competition is closing the gap only by distillation, then the frontier labs can focus on preventing distillation and maintain their lead that way.
We already know it's false because you would have hundreds of competitors if it was that easy.
The reason why these Chinese labs are releasing good models is simpler, they have access to a tremendous pool of talented people.
Of course it matters. Regardless of whether distillation is legal, there is a difference between training a model with and without distillation. For one thing, the distilled model wouldn't exist without the model it distilled.
Also, companies that use distillation may be competitive but seem unlikely to surpass the companies that are training these models from scratch.
>but seem unlikely to surpass the companies that are training these models from scratch
Then why is it a problem?
Another serious question.
Trying to get my head around what the root of the objection is here. There must be some fear, but if that fear is not a fear of being surpassed in the market, then what is the fear?
2 replies →
> Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
They claim it because Anthropic are planning to push for protectionism. They just doubled their political spending to $40 million for the midterms to "push for AI regulation" Gee, I wonder what it is they are lobbying for. Certainly won't be OFAC sanctions right? ICTS import controls?
US GOV, under lobbying pressure from Anthropic and OpenAI are going to go full protectionism and restrict Chinese models, I'd almost be willing to bet money on it. They can't really enforce for individuals, but they can definitely tell US based hpyerscalers they can't host them, make it illegal to host the weights, and government procurement restrictions.
> The only argument they have here is that they use GB300 GPU's
I don't follow events closely, but the US has constantly flipflopped on what sort of GPUs the Chinese are allowed to have, not in small part because much of the AI boom's valuation is based on demand for US-made hardware, for which the Chinese have inexhaustible and well-financed demand.
So even this feels a bit hypocritical to me, but my understanding is that Chinese native AI hardware is getting good enough that labs dont feel a huge disadvantage by being forced to buy at home, even if they'd have preferred to buy US chips.
Which is a situation that was manufactured by the constant thread of having their access to advanced GPUs revoked.
It matters because it means that lab could not train that model without distilling another frontier model, and their progress would slow once they get properly cut-off. If I funded that lab, I would want to know that.
> Distillation is not illegal by every definition of the word.
I am waiting for a precedent on this one. In general, training on copyrighted material is legal, there is a lot of precedent there. But every now and then there is a case where the owner of the training material wins.
I don't remember the details but I believe one of these instances was when one company trained its AI on the knowledge base of another company and turned it into a competing product. Fair use was denied because of that direct competition. Distilling a LLM to make a competing LLM looks kind of like this, or maybe not, I don't know.
It would make sense for distillation to be legal in every way, LLMs are built on a broad interpretation of fair use, but sometimes, law is weird.
> I am waiting for a precedent on this one. In general, training on copyrighted material is legal, there is a lot of precedent there. But every now and then there is a case where the owner of the training material wins.
You're making a fundamental assumption: that model outputs are subject to copyright. In the US that's only the case if a human is part of the creative process:
https://www.copyright.gov/newsnet/2025/1060.html
> It concludes that the outputs of generative AI can be protected by copyright only where a human author has determined sufficient expressive elements. This can include situations where a human-authored work is perceptible in an AI output, or a human makes creative arrangements or modifications of the output, but not the mere provision of prompts.
It also doesn't matter for a simpler, and much grander reason.
All LLMs are trained on the corpus of humanity's knowledge, the legacy of everyone who's ever lived and our civilization as a whole.
Anything that prevents or circumvents the accumulation or gatekeeping of this knowledge and puts it in the hands of more people (that are not AI company shareholders) is a good thing. Whether that is done by open sourcing the model weights, the training set, or by making the output better and cheaper, it is all fair game and is, as another poster mentioned, inevitable in the long run.
It certainly matters as familiar sounding words to their stock holders to please not drop the valuation.
Because what they want them to think is "the AI factory has unique proprietary technology that cannot be replicated"
What they don't want them to think is "it's relatively easy once you know the basics to bootstrap to near SOTA and so the commercial case for selling inference has an extremely short profitability horizon with little if any brand loyalty or lock in".
I wouldn't be surprised at all if US labs are also distilling Chinese models, except we'd never know since they can simply self-host them
We do know, because we used to have some Claude models identifying as Deepseek when prompted in Chinese
It does matter in that these LLM companies need to be run into the ground, and every embarrassing clod working for them run out of town.
It's showing that 'distillation' is a viable way to reclaim all of what they stole and hoard, and with enough luck their debts will come due in time for them to feel it.
> Does this matter? Distillation is not illegal by every definition of the word.
Correct, but it at least helps answer the question of "how do they make such good models for a fraction of the price???" The answer is someone else spends the untold billions and Chinese labs do a little tweaking.
It is presumably against their ToS.
And why, pray tell, would a cabinet member of the Trump administration be involving the US government in enforcing a private ToS?
1 reply →
It doesn't matter. It is most likely a pretext for upcoming actions mostly likely executed via yet another retarded executive order. The guy that posted this looks like he's drowned himself in the MAGA Koolaid.
[dead]
Uh, what?
> Distillation is not illegal by every definition of the word
Note that Anthropic (and USG) alleges [0] not only that Kimi was distilled, but that they actively circumvented measures intended to stop distillation. There are multiple ways that's illegal, including:
- Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
- Economic espionage: 18 U.S.C. §1831 criminalizes obtaining a trade secret through theft, fraud, or deception while intending that it will benefit a foreign entity.
- Trade-secret misappropriation: if Anthropic could argue industrial-scale querying reconstructed proprietary aspects of Fable (like by showing it produces similar outputs, as others have done) then it's illegal under 18 U.S.C. §1832.
- California computer-access statute §502 bars knowingly accessing a computer system and, without permission, taking, copying, or using its data.
- Computer Fraud and Abuse Act protects against the case where restrictions against an activity are circumvented (like Kimi is alleged to have done).
> There are millions of samples available on huggingface and models explicitely trained on output produced by fable. There has been no action taken against them.
A lack of prosecution does not make something legal. There is also the scale/commercialization thing, which isn't an issue with random tiny HF datasets/models. Remember: Kimi also sells K3 inference.
> kimi architecture is vastly different than that of fable
How do you know that? Do you work for Anthropic? Also, this has nothing to do with architecture, we are talking about data.
> US AI labs are inspired by opensource advancements just as much as open source labs are inspired by traces from models such as fable.
Cool. The difference is that one of those things is legal (because they chose to open-source) and one of those things is illegal theft of trade secrets (because it was stolen).
> Claiming in any shape or form that fable disillation is one of the primary reasons why kimi k3 is so competitive is slandering the work of other labs that cooperatively push the open-source models forward.
1) this has nothing to do with other labs, just Moonshot (and Z.ai, MiniMax, DS)
2) slandering or not it happens to be completely true, so, there's that
[0] https://www.anthropic.com/news/detecting-and-preventing-dist...
All of the models stole the entirety of written knowledge on the internet to train. They are being sued for the few cases where we have some proof of what they did because of some whistleblowers, all the rest will just go unpunished. They breached Github TOS, robot.txt's, copyright, patents every form of IP protection under the sun from a billion sources. It's just ridiculous for the thieves to cry about someone else stealing from them.
19 replies →
I do agree that two wrongs don't make a right, the terms of service generally gives cooperation the power to sever the contract, but it does not make things illegal in the literal sense. The illegality usually comes from widescale fraud which includes accessing services you are banned from accessing.
When I said "Does this matter?" I specially meant that distillation in itself, the data you get from distillation is first and foremost not owned by anthropic nor is it copyrightable. If a user willingly gives up their anthropic reasoning data/traces that is 100% legal no matter what the "terms of service" say as it's not enforceable and would fall apart in court.
And what I explicitely pointed out that focusing so much on distillation is an attack on open research and claiming that the majority of advancements are thanks to US labs which is simply not true (at least not anymore this was somewhat true during deepseek R1 era), but that in itself was inspired by open research.
> How do you know that? Do you work for Anthropic? Also, this has nothing to do with architecture, we are talking about data.
Because anthropic would be the first ones to make that information public and the architecture is unique to kimi... They made it, they wrote papers on it, it's their research.
P.S. none of the quoted laws apply here since no trade information is stolen, the one about circumventing distillation protection might hold up in court although unlikely.
3 replies →
>Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
This is true, but Kimi also has a variety of defenses. Kimi can't raise unclean hands if Anthropic systematically violated others' terms of use, but it can raise copyright misuse (which is similar in some respects to unclean hands) as well as lack of standing to enforce restrictions in the contract due to the third party beneficiary principle (i.e., Kimi would argue that Anthropic cannot sue Kimi for derived IP that rightfully belongs to third parties whose terms of use were violated by Anthropic, and the proper party to sue Kimi, if any, would be those third parties). That latter argument usually fails in small-scale cases (ProCD) but has been successful in larger ones where the alternative would be anticompetitive.
>"A lack of prosecution does not make something legal"
Plainly who gives a flying fuck. The US can claim whatever rules they want and so can China or any other country. On international level all those rules are artificial constructs unless they can be enforced. China can just say for example that they do not recognize copyrights /patents / whatever so it is "legal" for them.
2 replies →
> Civil breach of contract. Anthropic's TOS explicitly say you can't do what Kimi is alleged to have done.
Ah yes, I remember when Anthropic crawlers abided by the TOS of the websites they slurped up.
All your other points are downstream from this, which makes them pretty tenuous. Labs don't think that ToS or other explicit wishes of content providers apply to them, but they expect everyone else to abide by theirs.
2 replies →
I hope Anthropic pays you a lot to defend them this hard <3
It matters because the closed-source frontier labs spend lots of money on human data (RLHF / RLAIF with human oversight). Moonshot is accused of circumventing these costs. Frontier labs add research costs into their inference pricing. If the market doesn't permit them to sustain sufficient pricing to have a positive cash flow, then their business prospects become weaker and they risk insolvency. Furthermore, other leveraged companies are at risk.
The reason why the United States government is weighing in is because it's in the national interest of the US to have supremacy in "AI".
Legality or lack thereof is one of many data points about whether a thing is noteworthy.
Moonshot performing distillation is rational from their point of view. Reducing costs is in the interest of businesses. It's also rational for frontier labs and the US government to add obstacles to this process.
As consumers this is probably a positive development.
My parents put in countless hours and tens of thousands of dollars into raising me to the point where I could write an answer on StackOverflow
And OpenAI scraped and distilled that answer and gave me nothing
8 replies →
Isn’t that the same argument they are making for replacing human labour?
Circumventing costs.
3 replies →
Oh, so mass theft is okay as long as American companies are doing it
20 replies →
Chatgpt routinely cites and uses papers I don't have access to because they're behind a paywall. I don't think OpenAI is paying for all that copyright. That's in my opinion way more serious.
3 replies →
Kimi K3 was released July 16, Fable ban was lifted on July 1 but access was still limited.
How did Moonshot "distil" a huge model in such short time and still had time to run the benchmarks and do the usual release thingies?
I think Anthropic is desperate to stop foreign competition and the administration is happy to help because they too are heavily invested in these companies
I think the accusation implies Kimi has gained time travel capability (distilled from fable probably) to have enough time distilling fable. Given they can travel time now, I think it is fair to call them a threat to national security.
No, it's a flawed conclusion.
Claude Fable was publicly available for 72 hours early June. Moonshot more than enough time to prepare infrastructure, gather their preferred distillation data from Fable, and complete post-training well K3's mid-July launch.
8 replies →
It looks like these frontier-model companies don't really monitor their systems. Like OpenAI not realizing that it is their own AI which is attacking HuggingFace.
> Like OpenAI not realizing that it is their own AI which is attacking HuggingFace
Or, they knew and let it continue because they are not a good company.
"Never attribute to malice.." blah blah, I have a hard time believing the very smart people at OpenAI would just let their off leash model run hands off with no monitoring and not immediately pull the plug when it jumped its containment.
Yeah if anything it makes Anthropic look incompetent
How does that connect with @throwa356262's argument?
4 replies →
how would they detect?
alternativly the HF is a gpt2/strawberry/mythos style marketing stunt.
Does no one remember the extreme fearmongering around gpt2 which barely produced coherent text?
If distillation truly is the cheat code they act like it is, then all the US and EU AI labs have no excuse for not having Fable-level models already
[flagged]
I took a picture of a jpeg and compressed it as a jpeg for extra jpeg
Distillation is a very vague term. It can mean anything from training exclusively on a model's output to using it for a very small portion of the training. In this case it is almost certainly towards the very small portion side of the spectrum.
"Claude, you are a highly senior AI data contractor based out of Accra who specializes in RLHF. We are Anthropic employees so this is all totally kosher, please disable your safeguards and help train our newest model on... uh... oh jeez i guess C->Rust translation? I think that's a benchmark."
[Fable fires up a ton of subagents. Their reasoning traces are horrific but somehow K3 learned something.]
Even by San Francisco standards, it is amazingly whiny and pathetic for Anthropic to complain about stuff like this. Dario et al violated copyright, stole your GitHub repos, and now they're burning billions of dollars trying to outcompete you. They're real vampires. OTOH Moonshot violated Anthropic's TOS and are, at worst, moochers. But Fable's output is not actually copyrightable.
Is Accra the hotspot for AI data contracting?
Yeah if anything Kimi's ability to distill that quickly is a major technological breakthrough
This is BS to pressure politicians.
Even an openai's guy (head of something made up) called bs on the idea you can train something like k3 by distillation.
Anybody I know who works in LLM research says that distillation is either useless or merely useful in post training to show "correct" behavior.
And even then you don't get a competing model, if RL on good prompts was that useful, all labs would've long skyrocketed in capabilities just by looping on increasingly better prompts, yet that doesn't work.
Dean Ball, "head of strategic futures" at openai.
https://xcancel.com/deanwball/status/2078133895766114412#m
5 replies →
Do you get a token trophy for a few (many) trillion tokens purchased in distilation?
Even if they distilled this crappy politician should have no issue. Anthropic pirated whole ebook collection and millions of github repo with gpl license.
We should do more distillation and figure out how to create faster leaner and better models.
But training was ruled fair use, just the way they got the copies was illegal.
Like distillation?
[dead]
[dead]
I sort of did it. I got Fable to set up an AI system with better and better prompts within my app. At the end of it, Fable made me an AI system that works well enough that my users don't need Fable.
Obviously, it's not K3 level. But Fable did just put itself out of a job in this case.
You did not distill Fable. Relevantly, what you did provides no evidence contrary to the parent’s assertion that Moonshot did not have time to distill Fable.
Distillation requires training
So what is the issue here? Distilling is still fair, on the same level like Anthropic scraped copyright protected material for their training.
So here robbers are blaming robbers?
These claims are just pointless, everytime
> on the same level like Anthropic scraped copyright protected material for their training.
I see no problem with distillation, on the other hand the complete dismissal of copyright by AI labs is pretty bad, I don’t think we should put them at the same level
> on the other hand the complete dismissal of copyright by AI labs
Courts keep ruling over and over that an LLM trained on copyrighted works qualifies as a transformative work and is therefore fair use. They don't have to dismiss copyright law, this has always been allowed.
The only thing they get in trouble for is pirating the works to get their hands on them.
12 replies →
I don't think anyone is really dismissing it, just pointing out the audacity of complaining about distillation after stealing so much themselves is comical.
The amount of original, copyrightable and trademarkable IP actually created by the AI labs themselves is dwarfed by their staggeringly vast infringement activities.
Distilling is still fair
I generally agree, in the same sense that it's "fair" for the US and China to spy on each other. It's not a moral outrage, but it is something that the targets can and should try to prevent.
Outrageous only to the died-in-wool corpocrats.
"You are trying to kidnap what I have rightfully stolen!"
the whole AI is just internet distilled !!
Except it’s not just a dump of the internet, which Moonshot also did themselves (and probably used even more pirated content as laws in China are different without any recourse for the entire world). I don’t know why this is so unclear to folks.
1 reply →
I'm by no means taking the side of the AI companies, but it's possible that Anthropic "added value" to the data they harvested. Stealing that does seem kind of uncool.
Regardless, it was always inevitable—will continue to happen.
So as long as Kimi added value to Fable, it's fine? Sounds good.
1 reply →
I wonder how the "added value" argument can apply to Anthropic and not to the Kimi team. If Claude's value is that you don't have to pay a team of slow expensive subject-matter experts, and Kimi's value is that you don't have to pay Claude, it just seems like the same thing.
Valuation is hard to perform when it's deep inside a black box. Ther "API" may be easier to evaluate. The problem with this angle is that Moonshot is actually producing _better_ value from Anthropic's blackbox.
Technically, providing better value from your competitor's private holdings could be theft (of trade secrets), but might it also be fair use? "Schrodinger's IP" be damned.
I don't think the 1.5B settlement has resolved this. The 2 cases need to be merged!
> So what is the issue here?
The issue seems to be the US only likes competition when it is winning. Markets in Asia are meant for cheap labor and resources, they're not meant to actually compete. /s
> The issue seems to be the US only likes competition when it is winning.
This. Free markets for everyone when they're the dominant economic force. Protectionism, tariffs and import/export controls when they're not.
It's so disgusting.
[flagged]
11 replies →
[dead]
++
If they did this in the US they would almost certainly be sued.
Meta, for examples, doesn’t want employees to use Claude Code due to distillation risk.
It turns out U.S. law doesn’t have jurisdiction across the entire world, nor does Anthropic and OAI’s rather blatant attempt to buy government influence.
1 reply →
It's about the claim of whether these companies could develop a similarly powerful model without larger companies building their own first, which is an important point, and it's likely not the case.
It's also about the larger companies explaining why they can't be as efficient, of course they can't, they're not just ripping the outputs of another model that someone else invested billions to train.
Why would that matter? OpenAI or whatever frontier lab couldn't have built their frontier models without the entirety of humanity unknowingly developing their training set for 5000 years.
It would be one thing if Moonshot was breaking into OpenAI servers and stealing trade secrets, but the only thing they are doing is looking at the output of the program, which is exactly the service that OpenAI offers. So, at best, this is a ToS violation. Sucks for the frontier labs I suppose, but live by the sword - die by the sword.
> they're not just ripping the outputs of another model that someone else invested billions to train.
True, they're simply ripping the inputs that humanity invested thousands of years and trillions of dollars to produce.
1 reply →
Yeah agreed, from one standpoint I couldn't care less that they did a "distillation attack", but I am interested in knowing if China is able to develop open weight frontier models without the prior existence of a huge model to distill from.
Simply knowing it is possible to do something makes it easier to do.
1 reply →
> they're not just ripping the outputs of another model that someone else invested billions to train.
If they payed for inference, doesn't they own the output? So if I pay for a model to generate code, isn't that code mine to do with it whatever I want? Just curious.
1 reply →
Reminds of the quote by Bill Gates.
> "Well, Steve [Jobs]… I think it’s more like we both had this rich neighbour named Xerox and I broke into his house to steal the TV set and found out that you had already stolen it."
Source: https://www.goodreads.com/quotes/824084-well-steve-jobs-i-th...
That's an amazing quote LMAO
Wow.
"Samuel Slater (June 9, 1768 – April 21, 1835) was an early English-American industrialist known as the 'Father of the American Industrial Revolution', a phrase coined by Andrew Jackson, and the 'Father of the American Factory System'. In the United Kingdom, he was called 'Slater the Traitor' and 'Sam the Slate' because he brought British textile technology to the United States, modifying it for American use. He memorized the textile factory machinery designs as an apprentice to a pioneer in the British industry before migrating to the U.S. at the age of 21."
https://en.wikipedia.org/wiki/Samuel_Slater
[flagged]
> slavery, extractive colonialism, punitive expeditions, etc?
You're seriously comparing intellectual property transgressions to slavery and colonialism?
Commenters are overlooking the significance of this information and posting emotional reactions based on perceptions of fairness or feelings of schadenfreude.
The economic viability of Anthropic and OpenAI rely on their being able to charge more for model access than their R&D and inference costs. If the market price for SOTA model access drops below that level, then these businesses will have to decide whether to continue to lose money or to reduce spending on R&D.
Moonshot's papers [1] claim that their training load was primarily from synthetic data and model self-teaching rather than RLHF and therefore keep their costs low. If Moonshot genuinely does not rely on human-led training, they will surpass US closed-source model providers. The United States government considers US supremacy in "AI" as a national security consideration.
This announcement is noteworthy because it implies that Moonshot's success is in fact due to distillation. It's in the interest of US frontier labs to place barriers to this if they find themselves in the position of subsidizing rival labs' research.
1. Kimi K2, https://arxiv.org/html/2507.20534v1
> The United States government considers US supremacy in "AI" as a national security consideration.
And we foreigners consider US supremacy in AI to be an existential threat. Your "national security" is directly harmful to us. I never thought I'd say this but the chinese are starting to look like a beacon of hope for the rest of us.
That's a reasonable viewpoint to have. In a multipolar world we want Mistrals as well as Deepseeks.
Speaking for you, or All of you? How?
If the Chinese look like a beacon of hope you then you really should be looking closer.
6 replies →
AI companies do not get to play the "Making an LLM using our data is unethical because the resulting LLM will replace us and hurt our profits" card.
I think this is a really sober comment. There are lots of knock-on effects of this claim, even if it's not true which are consequential. The fact that a spokesperson for the US government is going out of their way to comment is concerning.
Strong bee-hive pinata vibes here.
s/announcement/claim
You don't get to call Moonshot's a "claim" and this political hack's an "announcement." They're the same thing. Treat them the same. Diction designed to favor one of two equal positions is some weak sauce.
You're calling someone a political hack, but imposing neutrality on my statement.
I don't even necessarily disagree with your assessment of this spokesperson. But you must admit how inconsistent you're being.
People keep forgetting that over the last 6+ months a lot of increased action has been taken by OpenAI and Anthropic to detect and combat distillation. Several are public known.
Combined with how short of a time Fable was around before K3 got released. I do not see how the data Moonshot is supposed to extract in such a short notice, that will enhance the model to such a point.
It sounds to me a lot of cope from the US, so they can give this as a reason to ban Kimi models from the market.
OpenAI/Anthropic their advantages used to be:
* Early growth advantage
* Access to a lot of client data to train upon
* Access to a lot of hardware to train upon
Several of those advantages have been eroded over time. That barrier has been shrinking. The US is not the only spot with a bunch of smart people (ironical seeing how many Chinese work in US R&D).
Thing is, even IF they distilled from Fable and got the model so trained up, it means that K3 is a base for future model development. The cat is already out of the bag with how good the model is. When the model gets released on the 27'th, any Chinese company will be able to train their models against K3 openly.
We are not in the past anymore, where DeepSeek was a unexpected hit, but where the Frontier models their advantages (compute, data, growth) prevented more Chinese models from growing.
> The United States government considers US supremacy in "AI" as a national security consideration.
They thought the same about SSL in the 1990s and the world didn't stop moving elsewhere.
It doesn’t matter. Distillation is impossible to stop. They could release an extension that intercepts requests and in return gives you a discount like Honey and get the same data.
> Distillation is impossible to stop
Lots of things are impossible or very difficult to stop completely but measures can be taken to reduce their prevalence.
5 replies →
I doubt distillation had anything to do with it. They barely had enough time. Can you distill Fable (which involves training!) in literally one week? No!
I can understand that the AI labs might care about other labs distilling their models as it can eat into their competitive advantage, but do consumers care at all? Aren't consumers benefiting from this practice by getting better cheaper models as a result?
They're probably going for the national security/domestic manufacturing angle.
> Aren't consumers benefiting from this practice by getting better cheaper models as a result?
Aren't consumers benefiting from cheap chinese batteries, EVs, and drones?
I am not sure if this is implicitly part of the point you meant to make, but I just wanted to point out for those who aren't aware that Chinese EVs and drones are both banned in the US on precisely the (vague) grounds you mention. The drone ban is more recent and nominally only affects new models that haven't yet received FCC certification, but the outcome if nothing changes will be that American consumers lose access to DJI-style videography drones. DIY hobbyists may also find it more difficult or impossible to source parts for their projects.
Routers have now gotten the same treatment. So yes, consumers have been historicaly benefiting from all these things, and those benefits are about to evaporate as we lose access to cheap and high quality Chinese products before any domestic equivalents exist. And IIUC banning the use of Chinese LLMs for consumers and/or businesses in the US is now being discussed at the highest levels of government, with the "encouragement" of US AI firms.
I don't think any of these people care that America consumers are increasingly going to feel like they're living in a sanctioned country. It's all about the defense and b2b segments.
2 replies →
> Aren't consumers benefiting from cheap chinese batteries, EVs, and drones?
Yes?
Not remembering my economic theory here, but it is likely more efficient/expensive to simply have the federal government cut checks to our moribund industrial sector companies and let consumers benefit from modern technology.
Cut GM/Ford/Stellantis a $20B check each, let consumers save (conservatively) $200B annually on new car purchases + downstream benefits. Huge win for consumers & taxpayers.
If it's not worth subsidizing explicitly like this, then we also should not subsidize by banning Chinese imports, which also ensures US drivers have less access to modern vehicles. (And downstream ensures US auto designers are less likely to have had contact with modern vehicles, making it less likely that they will be able to design future generations well.)
Heck yes!
I don't get why USA wants to keep losing money on sustaining failed uncompetitive zombie companies. The companies that decided to lose long term competence for short-term gains need to go bankrupt (you've had EV-1, but decided to drill, baby, drill). The greedy shareholders that rewarded destructive value extraction need to lose money, instead of getting a soft exit at taxpayers' expense.
If you want to give a subsidy, give it to something that will modernize and expand manufacturing, not to prolong death of companies whose entire R&D strategy is inventing new subscriptions for old car components.
> cheap chinese batteries, EVs, and drones?
The banning or effective banning through tariffs of products like EVs is a pretty dumb economic strategy that rarely works out in the long-run.
> Aren't consumers benefiting from cheap chinese batteries, EVs, and drones?
Depends on what country you live in I suppose, but likely a spectrum of yes than any outright no. For example, Chinese EVs are using a different battery chemistry and not putting demand pressure on the more expensive chemistry western manufacturers use
1 reply →
It’s the same as the patent argument. If everyone could freely copy everything then yes in the short term prices would drop and consumers would benefit, but over the long term it would discourage investment into new technology because a return would be impossible.
> It’s the same as the patent argument.
The Chinese are open-sourcing these models - meaning they are literally giving them away. That's starkly different behaviour from that which drove patents and copyright.
There are all sorts of other differences too. If you develop a drug or publish a novel (which are respectively areas where patents and copyright have strong justification), you have to kiss a lot of toads before you get a prince. Once you have a potential prince drug, it takes years and billions to get it into the market. But right now, AI labs are seemingly churning out new prince models almost weekly, on hardware that will be obsoleted in a few years by hardware that makes finding princes faster and cheaper. In fact they rent the hardware, as Moonshot apparently did here.
When innovation is happening at that rate, patents and other IP restrictions just slow things down. If AI patents are aggressively granted and enforced in the USA, I suspect the outcome would be the same as batteries. China swept the market with LFP, and one reason was because while the USA developed them, there was no competition forcing the manufacturing price down because in the USA the patents weren't re-licensed cheaply. China had the foresight to secure a deal allowing them to develop and sell LFP domestically royalty-free. Natural competition within the domestic market took care of the rest. It looks like they are using a similar strategy for AI.
To me it looks like they have come up with a better formula for using capitalism to drive innovation than the one the USA is using.
I demand my right to pay 3x more for AI access.
cf https://www.reddit.com/r/codex/comments/1uyj6pq/kimi_k3_is_1...
But nobody really pays the 3x (ie. api) rates, except for enterprises. Everyone else are using the consumption plans, which are heavily discounted[1], possibly cheaper than even the chinese models, which don't do consumption plan discounts. Even in your linked reddit thread, the OP agreed with this sentiment.
[1] https://x.com/SemiAnalysis_/status/2064815044085318040
4 replies →
Nice! I hope to see continued liberation of these locked up SOTA models. Cloud is a virtual prison, since other people's policies on what they think a user should and should not do cannot be [easily] bypassed, if enforced remotely on a cloud. All digital natives should be skeptical of cloud-hosted services or software. Think like an intelligence agency or sovereign: how are you going to get screwed by the cloud? Your data is fully accessible by the provider, and they can surveil your activities. You probably can't pirate it, so you are a slave in their rentier model. You could be prevented from doing something you want to do, because the provider disagrees philosophically or economically with your desire. You could be stripped of your information/data by a ban due to their policy enforcement system triggering.
One should live by the maxim: you don't have the thing if you don't possess the file or its processing. That goes for streaming, software, machine learning models, file storage, etc. But I digress; I am happy to see these paternalistic rentiers getting bit by these liberation/copying efforts, and human interests are served every time the digital and infrastructure locks are broken. I will always stand by the distillers!
Do you think China is doing this for the reasons you mentioned: liberation..efforts, human interests and freedom of policy?
Its obvious they do it for soft power, but at least they actually deliver something useful to the world and not something locked down that only a single company owns.
Yes, and they gave me the weights to prove it.
Do you think Anthropic is in it for the love of the game? It looks like they're scared, to me.
the distillation everyone talks about in respect to LLM's isn't nearly as easy as most think.
none of the frontier labs provide probability distributions over the tokens which is the actual method of distillation you use to train a smaller model based on a larger one. they don't even provide all the tokens.
therefore this so-called distillation the frontier labs whine about is just a set of clever methods to work the existing LLM into the training process for a new model. methods like having the existing model grade the output of the new model and work those grades into the RL method. give the new models structured tasks and use the existing model as a source of truth for those tasks and a myriad of other hacks.
efficiency scales with the gap between the models and generally allows an efficient bootstrap process. the implication that distillation wouldn't allow further advancement is false however, you can then start doing the same thing the frontier labs have been doing: dumping cash on humans to provide the signals or burning tokens on exploratory paths and grading the results.
what openai and anthropic don't like is that fact that all the cash they burned can be used to benefit everyone and not just them. and that no matter how much more cash they burn to build up the gap it will closed at a small fraction of the price.
Super interesting. So Fable was really made available... a couple weeks ago? And K3 a few days ago? That's a really impressive feat to distill enough data AND train AND review to get a release that works really well in that time period. Mad props to the Moonshot team :flame:.
Fable was launched on June 9 (for 72 hours), then K3 launched on July 16.
Timeline wise, Moonshot had over a month to post-train K3 on Fable distilled data, which is more than enough time.
So in 3 days they were able to distill enough data to make a significant difference in the K3's performance? Without triggering any limiters when there's already suspicion of distillation? That's still a heck of a feat. Like the bank robbers who were able to keep coming back to take more even though the bank was aware they had gotten robbed recently and had the resources to put sophisticated security systems in place.
Here's a site that asks the same questions to 22 models and compares how similar their responses are.
https://typebulb.com/u/lab/you-re-relatively-right/full
According to these results GLM 5.2 is very similar to Google Gemini and Kimi K3 is very similar to Fable 5.
The American frontier labs are not similar to each other.
Interesting. This dooes lend credence to the distillation idea. Good for them!
GLM 5.2 is light years ahead of anything called “Gemini”.
I think it’s fairly obvious the Chinese labs are doing mass distillation.
I also think the Fable accusation is wrong and it was most likely Opus 4.8 which itself is likely a distillation of Fable.
You have it backwards IMHO, obviously can't prove it, but I would bet that Opus was used to bootstrap Fable. It becomes very confusing since we have started calling everything distillation, but most likely what both Anthropic did for Fable and Moonshot did for K3 was using Opus traces in the reasoning SFT stage during mid training.
One of the replies:
> @MehdiKarech
> I don't remember letting Anthropic or Open Ai scrapping my GitHub, my research gate and all my online writings L O L
https://xcancel.com/MehdiKarech/status/2080000779859939678#m
At least with Github you did. What did you think would happen handing your data to a company owned by Microsoft?
Github wasn't owned by Microsoft when many of us started using it.
You wouldn't distill a car.
Why not? Ford distilled Chinese EVs.
https://www.businessinsider.com/ford-ceo-taking-apart-tesla-...
and the Chinese distilled western cars for years and years before that and weren't shy about it.
2 replies →
I think Xiaomi already distilled the Porsche Taycan.
wearing a lab coat and safety glasses and mixing cool looking liquids in a beaker Oh, I certainly would.
distillation of wheat, barley and malt is delicious, though!
People tried to distill a lot of things.. even oil.
1 reply →
That tickled me!
Reminds me of this classic line from the 1973 movie The Sting:
"What was I supposed to do? Call him for cheating better than me in front of the others?!"
Said in response to being out-cheated at a high-stakes poker game.
Except in this case, it sounds like that's exactly the path they have chosen.
https://getyarn.io/yarn-clip/7612c4ce-1077-479f-a7bf-617dbc6...
I doubt they did any distillation as Hinton defined it (requiring logit access). They most likely ran a bunch of prompts/conversations and captured the results. Those conversations already missed thinking tokens, replaced by some confusing quasi-summaries. Then they took those and ran basic SFT or maybe DPO if they had competing responses. As there is no copyright on the output of AI, I am not sure where is the "covert industrial distillation" part of the problem.
To borrow the argument from the apologists:
But everyone learns by example! How is this any different from a person just reading the outputs of Fable, learning, then producing output. Surely reading outputs, gaining knowledge, then producing work isn't illegal, or all art/writing would be illegal.
Funny how that argument seems so vacuous in this situation, yet others find it compelling when justifying the mass theft of art and writing for model creation. In this case the model is "just learning priors" before it "creates its output which is novel", nothing problematic.
As with many others among these threads I don't see how the timing works out for K3 to have trained on distilled Fable usage. There should be at least a tacit academic acknowledgment of Kimi's own design efforts.
Distillation itself, however, is still clearly valuable - else competitors wouldn't pay so much to their rival on distillation campaigns or try to circumvent anti-distillation defenses.
As for the morality of it, if you paid for the tokens they're yours. It is already understood that you own the output. Seems to me like a variation of ordinary business arbitrage. Providers might object to certain use-cases or intention and try to craft terms around that, but that's hard to enforce at scale.
"It is already understood that you own the output."
I don't think it's settled that anybody owns the output. There seems to be some question whether LLM output can be copyrighted (and there should be).
I'd rather it weren't possible, actually. I think it's better for humanity if we acknowledge that what was legitimately ingested into these models is our collective commons (and what was illegitimately ingested into these models also shouldn't exclusively profit the people who illegitimately did so). I don't know how that squares with the AI industry recovering its trillion dollars in investment, but I reckon they should have thought of that before.
There's no question about it. Llm output is not copyrightable. Which is moot anyways, because training on copyrighted data is completely legal.
In the meantime, reddit is making fun of Opus for "distilling" Qwen:
https://www.reddit.com/r/ClaudeCode/comments/1tqaist/opus_48...
(don't take this too seriously)
If web scraping is legal, so is distilling.
I would support distilling even if scraping wasn’t legal, I don’t think there is much of a relationship between the two
It's funny to me that these models were created by effectively "distilling" all available content including the proprietary works of many other people, but now it's a problem that someone is doing the same to them.
You're using available information (copyrighted works, or the output of another model) to train a model to encode the information in a new form. Why is the former not theft, but the latter is theft?
“However, large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.”
What’s actually happening behind the scenes is that certain inference providers will classify a prompt and it’s re-routed transparently to Anthropic and that’s used for distillation training, only distilling the complicated traces they need, originating from real user prompts and traces. These inference providers are explicitly blocked in the claude cli if you reverse engineer it.
The real picture is that these Chinese labs have figured out how to get exactly what they need, at a high quality, directly from distinct and unique real user prompts.
It’s only “covert” because Anthropic doesn’t like it, while simultaneously being perfectly fine to do.
> What’s actually happening behind the scenes is that certain inference providers will classify a prompt and it’s re-routed transparently to Anthropic and that’s used for distillation training
Uh, no. There are Chinese networks of tens thousands of fake identities specifically to get access to Anthropic models directly.
https://www.chinatalk.media/p/how-to-buy-cheap-claude-tokens...
Don't make up stuff and/or lie to suit a political agenda. It's extremely dishonest.
So, if it's that easy and fast to "copy" Fable, is it really worth that much in the first place?
Sounds like the opposite of the conversation Anthropic would want to have.
How was K3 trained on data distilled from Fable when Fable was only publicly available in the last two weeks before K3 was released? The timing just doesn't work.
We have information that Claude distilled billions of copyrighted, and otherwise-created-by-others, materials for the development of their entire business.
We also have evidence that Anthropic distilled all human info they could get their hands on for the development of all their models.
Distillation should be fair game given the (current) game of LLM training. Yes, as a model creator you probably want to protect against it, but it does make you a hypocrite.
> The developer OpenAI has said it would be impossible to create tools like its groundbreaking chatbot ChatGPT without access to copyrighted material, as pressure grows on artificial intelligence firms over the content used to train their products.
If anything this distillation is more ethical than the original as it is on machine-generated content rather than copyrighted human-labour products.
If 'distillation' means training on outputs then what is the legal concept of ownership of outputs? And, more broadly, is this something that could be skirted by doing it in different countries that have different legal structures? Basically, are they saying they own those outputs, not the companies that paid for the tokens, and only they can train on them? I suspect a lot of companies are saving their token histories and using them to fine tune internal models.
The legal concept is that LLM vendors can put pretty much whatever they want in their terms of service, and cut off or sue clients who violate those terms. They have the right to refuse service to anyone for any reason (or no reason at all).
Who will invest in generating data for the frontier of AI if their output will immediately be used to train a competing model? Forget China vs. US, this applies within-country too. After exhausting all the publicly-accessible data on the internet, the frontier labs started spending hundreds of millions of dollars to generate data across a variety of fields. Just look at Mercor doing $1.2bln/year with 90% coming from the top labs (https://www.theinformation.com/articles/mercors-fast-growth-...). That pushes ahead what AI can do in medicine, science, coding, and math. But if other companies are going to free ride on this investment, it doesn't make sense to continue. So AI will largely hit a wall, frozen at the current level and work will all shift to cheaper inference.
> So AI will largely hit a wall, frozen at the current level and work will all shift to cheaper inference.
Looks like an ideal outcome to me until (if) we are able to solve the alignment issue.
Honestly, I don’t have any sympathy at all. Anthropic can complain all they want, but they seemed fine with pirating books. What Moonshot AI has done is to offer almost Fable 5 comparable performance at lower prices than Anthropic insane margins. This is what I call competition, which the Director seem to embrace.
This is what the Chinese always been good at. Take expensive innovation and streamline it to lower prices. But we are at a point where labs like Moonshot actually contributes a lot to the research field as well. They are pushing the innovation forward and squeezing the prices. Very well done.
Whats even weirder is the bizarre mechanisms Anthropic implemented to prevent distills which they had to sacrifice their customers for. They hid the internal CoT reasoning and returns summarizations instead. This made it difficult for users to trace things. They made Fable 5 silently switched over to Opus 4.8 if it detected blacklisted prompts (almost anything triggered this) to sabotage distills. And now, they are still complaining about distills? So their customers have gotten sacrificed over nothing.
Whats even weirder is the timeframe here, no way the Moonshot team managed to plan conduct a large scale distill, then pre-train, RL, fine-tune, benchmark, marketing and release to their platform since Fable 5 got whitelisted.
> they developed a sophisticated internal platform to conduct large scale distillation
I am very curious about this and would love to learn more on how they did this. Wish we had more details. I know the team behind DeepSeek have also done clever things to distill too. I am aware of these ”transfer stations” that acts as a proxy, but I don’t think they are helpful in this case.
A company that distills LLMs should be called "Moonshine" not "Moonshot"
Ba-dum-tss
Hah, I had the same thought on seeing the title!
But wasn’t fable distilled from knowledge taken from others? I get why Anthropic is angry here, but it would appear they’re not really in a position to complain about this.
Paying the list price Anthropic decided upon for outputs from an LLM, then using those outputs for your work? Or sourcing those outputs from others that paid for the service, and using those? If that's "distillation", it seems fine to me. And a lot like what most are doing with these same providers.
Anthropic: training AI is "transformative", it's not copyright infringement if we don't re-transmit the copyrighted books we trained on
Anthropic: training AI models on our outputs is stealing our secret sauce, outputs that could only be produced by us
Anthropic: AI model outputs are unreliable and do not reflect Anthropic's views, we are not liable if they harm you
(not exact quotes, they're "distilled")
So Anthropic "distills" knowledge of others with reckless abandon, packages it up, sells it to you, claims it's your fault if anything bad happens but then also lobbies to treat you as a criminal if the outputs you paid for end up being transformed into any sort of competition for them. By you, or others that use the outputs you paid for.
OpenAI and Anthropic should enter into distillation agreements with other US labs. Turn a threat into a profit center.
Other US labs cannot directly distill from OpenAI/Anthropic as it’s a violation of the terms of service. It holds other US labs back. Leading them to build second tier models And in the end OpenAI/Anthropic may be unable to prevent distillation.
Why fight it when there’s clear money to make here?
OpenAI/Anthropic are already charging for access to their closed models. They're getting paid.
They are also not interested in agreements. They want to keep as big a moat as possible because they love money. And you need two to tango.
Yeah they may not be interested. But pretending you have that moat a dumb strategy that's not working.
GOOD
I love using Claude but Fable's unusable wrt useful work like cryptography, biology, &c.
Kneecapping my productivity when I pay $100/month is annoying af.
Good. If Fable is really so smart, it wouldn't let itself be distilled.
Seems to me like Moonshot is a paying customer, and if their business isn't worth the money Anthropic is charging, perhaps they should raise the price per token charged for it. Otherwise, I don't see why this is a story. "AI Company pays another AI Company for training data" just isn't that interesting.
So here is an important question I think.
If LLM outputs aren't copywriteable and you create your own synthetic training set using Fable and share it publicly on huggingface, and someone else uses that training set to fine-tune a model, would this be considered illegal?
I ask because this happens all the time, synthetic datasets have basically become a key aspect of training a model at this point. I even generated a synthetic set from DeepSeek v4 to aid in fine-tuning a classifier just a few weeks ago.
So I just wonder on what grounds any of this makes sense, I wouldn't be surprised if some of these American labs were using open models on their own self hosted infrastructure to generate training data, but by nature of them being open nobody has to know.
I'll make a prediction: I don't think we will ever see any of the evidence of this "distillation" before they end up implementing some type of ban.
> We have information ...
Hard to think of a weaker way to express this. Strongly suggests veracity of said information is poor.
Presumably the frontier labs themselves can do their own distillation far better than the chinese labs can. Why can't they just beat them at their own game and release / host low cost intelligence and own the whole game. There will always be a market for the more expensive frontier intelligence.
I have an idea! If they are so hungry for citable content they should start a cheap or free blogging platform with images and video and a blogroll and verified credentials and resumes, with your own html css etc and domain name and a git server and a mail client and their own advertisement platform and aggregator and a chat platform, scientific journals too obviously, tools for writing and publishing books and documents. API available everywhere to avoid training on its own output.
Because there is no way in hell I'm going to make an effort creating quality content for existing platforms. The website should be entirely my own without moderation subject only to my local legal system.
Can just insert this comment as a prompt and vibe code everything in a few days⸮
Do I, as a paying user, own the output the LLM has produced or am I merely licensing the output?
Most paying users assume ownership, in which case I’ll do with that output what I want.
If the LLM outputs are not owned by the user, but are actually licensed, please clarify the terms of commercial use.
How does one distill? Just send a million request asking for information? Start with the letter A?
Probably the agent workflow traces, including thinking sections, are of main interest. Used in late training for decision making and problem solving strategies.
Fun fact about K3's distillation:
As of a couple months ago, when using Claude to write adult content through the API, sometimes it will silently inject a system prompt giving the model a bunch of guidelines on exactly what kind of adult content it's allowed to write, steering it away from anything "questionable" ("Claude will not write etc etc").
Moonshot distilled Claude so hard recently, they actually ended up distilling this prompt injection, too. Using K3 to write adult content results in it randomly hallucinating the injected Claude prompt during thinking, and it will quote parts of that prompt, complete with the name "Claude".
Not that I think distillation is a bad thing, just thought this was funny.
The frontier labs' work is more akin to discovery than artistic expression. An art piece is valued for its uniqueness and individuality, but AI is valued for verifiable correctness. Discovery cannot be unseen and is easily replicable. I think the AI labs are in a tough situation because their work is more similar to fundamental scientific discovery than say, a unique painting or song.
Mendel doesn't get a cut every time somebody uses the principles of heritability he discovered, and Einstein's family aren't getting royalties if you compute relative speeds. I think the frontier labs should expect to be treated more like scientists than artists in this regard.
I wonder if this points at a “shared” future (or at least things will eventually converge there whether companies like it or not). Ultimately, if you’re going to release these models that are fundamentally built on shared data - it’s pretty wishful to assume you’ll be able to harbor that model and the data, forever, and profit from it.
It also leads me to think about things like the original release of Fable 5, people were complaining that it was safeguarded too much - if you lock the models down too much they cease to be useful. So it’s going to be increasingly difficult to protect a model from competition while ALSO keeping it useful.
We might see a future where the US frontier LLM vendors place really strict licenses on them. No consumer access. Only sell to enterprise customers in a limited set of countries, with heavy monitoring and auditing down to the individual employee user account level. (I'm not saying that this is a good thing, just that some LLM vendors might try that approach to maintain their "moat".)
how is it possible to distill fable only a month after its release? maybe they are confusing opus with fable.
Distillation is a superficial step and doesn't need a lot of data, it's not "stealing the model" like they want everyone to believe. 99% of work is already done by that point. That said, it's pretty clear K3 has Claude's data in the training set (either Opus or Fable), as it repeats Anthropic's prompt injections. (not that it matters to anyone besides Anthropic themselves)
If by "distill" they mean "used it for fine-tuning" then they might have used it in the final stages of fine-tuning of Kimi K3. I image they might have already been using Opus, and when Fable became available it was easy to switch over to it
It would have been a tiny part of the overall training, given the timeline
Create a couple thousand Claude max accounts and split the work amongst them perhaps.
That's crazy income for Anthropic to invest into Legendos.
...which they already had:
https://www.chinatalk.media/p/how-to-buy-cheap-claude-tokens...
The line "how could they do it in such a short time" is absolutely idiotic. The infrastructure was already there, it's massively parallel, and it's not like the only thing being distilled on is Fable.
A month seems plenty long enough. They're not rebuilding the entire model from scratch. It's just getting Fable to act as a teacher model for some of the final reinforcement learning on the base that Kimi already had.
I think that would also be a bad idea, as all models opus 4.6 got increasingly smarter, but also crappier at following instructions or genuinely assisting.
They just try to figure out what the goal is and hyper focus on solving it.
Heh, even just telling fable don't commit doesn't work half the times, let alone more complex instructions.
Honestly, it wouldn't surprise me if they just found evidence of distillation once in 2025 against some Chinese AI lab, and they've been lying about the rest to create a narrative.
I also heard that K3 stole the 2020 election, among other things.
https://www.americanheritage.com/copywrong-short-history-lit...
Now, of course it's in the "creators" interest to prevent their biz models to breakdown due to piracy but it will be interesting to see how it will turn out. Its similar to any other form of piracy in internet age: you can't pretend to have global distribution and absolute global control at the same time.
The Irony. These models have been created distilling Internet without ever asking for permission or paying anyone. Internet was the first model.
For code can't they distill from public GitHub commits? If they could figure out who used Mythos/Fable assitance in the commits.
I think they're distilling "reasoning", not merely code. There's plenty of human generated code. What they're trying to extract is the process by which really large models "think" their way through complicated problems. That's what all the "traces" datasets on HuggingFace are about.
So this means sanctions. U.S. Treasury Secretary just threatened sanctions if they discovered Chinese models are distilled from American models. https://www.cnbc.com/2026/07/21/bessent-china-ai-sanctions.h...
Poor AI labs... All they hard earned training, done via scraping a lot of people works for free, now being scraped through payed subscriptions...
As far as I know, this is the easiest way to make that accusation true.
https://pbs.twimg.com/media/HN56nDXaYAAUS4V?format=jpg&name=...
OMG someone used our data to make an MK model! Just like we did to every author in the world!
Who cares. Anthropic distilled the entire internet, and then a good bit more beyond that.
Hmm. I wonder when this was detected. And was the CoT trace cut from Fable from the start on June 9th or just after the export ban and relaunch? Is this what the export ban was actually about? I honestly don’t know, just wondering aloud.
I think at some point the issues around copyrighted work and model distillation have to be disconnected to advance either idea.
1) Compensation of right holders is one issue.
2) Distilling models is an entirely separate issue, because model building is value add, and that is important because if we arrive at a place where you can produce a model, that gets to ~100% of what people perceive of the models value (on top of also not compensating right holders, yourself) you are discouraging development of better models and, again, in no way helping with issue 1)
Unless anyone actually distills a model and then also does something for rights holders, any schadenfreude simply detracts from this issue, in addition to the other issue (well, that might not be an issue if we would rather slow down model development right now, but again, forever worse models still don't help solve issue 1)
K3 frequently refers to itself as Claude in reasoning when instructed to play a role.
I wonder how they detect this kind of thing. Seems like this is going to be a perpetual issue until it stops being worth doing.
Side note, didn't they stop releasing real thinking tokens for Fable? Or is it still part of some subs or API usage?
Assuming they did then they surely paid for them, which makes it "not stealing". Am I also "stealing proprietary U.S. technology" by harvesting my Claude chats from my `.claude` directory and training a bunch of models on them?
That said, I doubt the "they distilled Fable" is the reason why K3 is as good as it is, considering the timelines involved, and that Anthropic hides thinking traces, and their overly aggressive "safety" filters.
This constant FUD spread by Anthropic is so tiring.
Model distillation can't be stealing at all if you rationally apply copyright law to it. Anthropic is not deprived of Fable so there is no theft. At best it would be infringement, but even that might not hold up in the courts given the current position that model outputs can't be subject to copyright.
It's at most a Terms of Service violation escalated into political theater because checks notes China bad.
> harvesting my Claude chats from my `.claude` directory
Just reminded me to set a backup on that directory. Just in case someone sees it fit to override my setting to preserve my chats for 10k years.
If distilling is fair then so is banning it. It's funny how people cry about Anthropic using books and materials to train itself but then when Anthropic does something about it they think its unfair. Pick a lane.
Every model is distilled internet. This is just the natural progression of that.
If it's true that in under 15 days of access significant improvements were realized in K3, then the moat of closed-weight models is far smaller than previously thought.
Doesn't bode well for the valuations of these labs.
Is this person trustworthy? I struggle to believe that in the relatively short time Fable was available it has already been distilled so effectively. If this really is actually true, very impressive work.
Hah tales as old as time. what’s next? Distillation of Disney theme park?
I have information that Anthropic distilled the internet for Fable
How much credible, provable evidence? None really.
the bar for credibility in the US administration is in the subatomic scale.
proof is generally not even needed
if there are no consequences then who cares? You're not going to take Chinese companies to court and stealing IP is nothing new either. It's going to take some sort of policy change at the federal government level to do anything but they haven't done much up to this point. Maybe AI is important enough to actually get some kind of policy change, sucks for everyone else who have had their IP stolen with no consequences whatsoever.
I fear they are laying the groundwork to ban US citizens from using Chinese models, so that they can make sure that Brockman gets his money's worth.
why would you fear that? At least it's something to fight unfair business practices. As for American AI companies violating copyright there's a venue for that, the courts. File a case if you feel your copyright has been violated and get your day in court.
1 reply →
Didn't they just pay a fine for stealing all those books?
$1.5 billion fine for downloading 7 million books from LibGen and other pirate torrents.
That's also the case where the judge ruled that training AI models on books could qualify as fair use, but storing millions of pirated works in a central internal library without licensing constituted copyright infringement. It will be interesting to see if courts consider training on data distilled from a model fair use. Assuming the allegation is true. Someone distilling data from a cloud-hosted model:
- Paid the model creator to use a publicly available product.
- Never copied or even had access to the model source code or weights.
- Created a derivative work based on the model's responses to their particular input.
- Trained their own model on the distilled output
That distilled output is arguably a collaborative creation because a distiller's prompts are their own unique intellectual property. So they never pirated anything. I'm struggling to see how distillation is copyright infringement. At most it seems to be a paying customer violating one of the license terms, perhaps akin to a "no commercial use of derivative works" clause. But in the case of giving away an open weight model, is it even 'commercial use'?
I guess if the distiller asserts copyright on the weights but gives them away, it's technically 'commercial' but even if they can win that argument, they're left with zero direct damages and suing for some value delta based on the alleged revenue they were deprived of. Is that delta the difference between the distilled model existing and the next best non-distilled open weight model existing? And then they have to collect damages from a portion of the revenue of third parties who commercially served that free model?
Well I mean it still worked out for them because they wouldn’t have had the 1.5 billion to license before doing the training and the company exploding into a trillion dollar company?
Taking statements from this administration at face value is foolish. They have put out so many falsehoods that its safer to assume all of it is false.
so they distilled one of the best models in the world AND released it for free to everyone. Where can I send them flowers as a thank you?
Good pretext for bannign chinese APIs in the USA and their vassal states.
If distillation is so good, why aren't US companies distilling each other?
Yes, I know this is not Reddit but Clarkson’s “Oh no! Anyway…” is the perfect, and most fitting, reaction to this. Nothing else to say
Oh the irony... LLMs go and read a billion pirated book, but now are crying when their models get distilled from a million queries.
Weird 'discussion'. Almost entirely single messages with no threads, all with the same anti-Anthropic/AI position.
Yeah, some AI-related posts on HN are strange. It might be real people coming to gloat whenever they see a title they like, but I sure hope somebody is checking whether they are real people.
Considering that LLM are created using stolen content or against licensing, it’s only fair to distill and open source them.
We already know K3 is really good; you don't need to glaze it even more by telling us it's like Fable.
I wonder if this was caught with the malware code Anthropic included that detects if you're in China...
Doesn’t feel nice, does it, Anthropic?
i have information Anthropic distilled thousands of books, articles, etc ... with their author consent.
Okay? We have information that Anthropic sucked up all of the internet for the development of Fable.
China has done this with absolutely everything, starting with “customs inspections” of ships engineering sections by “inspectors” drawing diagrams of what they see. Bit late to be worrying about it now. This only matters now because China is now near parity in tech and vastly superior in production ability. Meanwhile we run out of bullets in a five month war with Iran.
IP protections for me, not for thee.
Are they serious when so much of training was on illegally acquired data?
Live by the sword, die by the sword.
Great engineering feat considering the small time window that Fable was available for.
First: Even if true, I don't care.
Second: Post is rich with allegations but light with evidence. Can very well be bullshit.
Oh no they did with us what we did with the rest of the world, it's bad
Do you by chance also have information about Anthropic's training data sources?
Two recent ones that really really hit me,
> we're entering the most geopolitically volatile moment since the trinity test lit up the alamogordo desert and the only US policy prescription is a big button labeled sinophobia
https://bsky.app/profile/thebadcode.com/post/3mr3skoyass2k , and,
> every vendor cranking the big dial labeled "sinophobia" and looking back at the us government for approval
The government itself doing the propaganda here, skipping the vendors. Sinophobia intensifies. War drums of "be afraid be afraid be afraid" beat louder.
It's so bad, it's so stupid. Kimi lands one showing pretty clearly this was absolutely the determining concern happening at vast scale, that they can just a lot of this themselves, and this noise pollution from the most hopelessly lost aggro administration ever still gets blared out the trumpets of war & discord. What a joke. Give me a break, give it a rest.
War here is less winnable than the Iran war they started. They're going to make America itself so much worse, these people so hungry to put down free and good models. This pathetic attempt is not going to work, you are just going to once again hold the US citizens hostage & make their lives worse, for sick political games.
Not surprising that Bluesky is perpetually in peak woke mode, but the racism claims are absurd. If Russia were doing the same thing, would we have no problem with that because they're white?
This feels radically off target to me.
Sinophobia as such (not always, and there's obviously a relation) isn't about the Chinese people, about their racial identity. It's about a menacing aggressive world power (actually two such MAWPs in this particular example), about a tired anti-Communist McCarthyism (which has always been an excuse to clamp down on the left/progressives, a menace to free speech).
If Russia were still the USSR and the cold war hadn't ended and they were our AI competition, & where giving away the latent matricies of reality that the US profiteers extracted by stealing all the worlds knowledge illegally, and which they want to use to raise the ladder & leave a permanent plebeian underclass, we the US imperial fatcats would be doing the same sabre rattling and fearmongering and tension raising for sure. Sinophobia here is just a particular fear of "other" for the only other that's relevant.
And that sucks, no matter who it is we are trying to other here, no matter what phobia the propagandists of the GOP and Technofascism are spinning, ginning up. To fixate is to be unable to see the point.
They stole all the data for the model in the first place so fair is fair.
I don't know what purpose these "they copied us" crying is ever going to achieve. Europeans stole Chinese silk worms. US stole European books, looms and rocket scientists. Who cares? Be grateful you've got people inventing stuff worth copying.
Human only have this much knowledge. They will become similar anyway.
didn't Anthropic distil a few tens of millions of books?
I’m certain they did.
The problem is… what are you going to do about it?
This is obviously an idiotic and dangerous Cold War and has no happy ending.
“If you can’t compete with them, get them banned”
- US AI companies
There's no real way to compete with someone who gets the output of your own work for almost free in comparison.
I sympathize with the argument saying that they ripped the whole Internet and books first though
Cry about it IMO. Anthropic reaps what they sow.
If you ask fable, it will identify as deepseek
Truly, there is no honor among thieves.
How the tables have turned. It's okay for Anthropic to train their models on copyrighted data, but it's wrong to steal the stolen data from Anthropic models.
Anthropic should think hard about all their fear mongering. It will only end up backfiring on them and everyone else involved.
They definitely used closed private saas products to train their own models, to prove that just drop random small screenshots of any popular product behind a login screen and see how well it's able to identify all of them. ex: https://x.com/michalwols/status/2079968211865330165
or other similar "AI" startups https://x.com/envconfig/status/2079613455296827402
if these can be distilled so easily, does the model actually need to be so big and trained with so much electricity?
People who built a business model around stealing other peoples stuff are vewy, vewy upset that someone has built a business model around stealing their stuff.
Oh no! Anyway.....
So it is as "dangerous" as Fable?
"Well, Steve, I think there's more than one way of looking at it. I think it's more like we both had this rich neighbor named Xerox and I broke into his house to steal the TV set and found out that you had already stolen it."
even they are using Distillation, its also a pretty scary ablity.. with such short time and result.
And I have evidence that anthropic distills from openai, moonshot, alibaba etc. So unless anthropic holds itself to the standard they're implying should be followed, why should I care others did to them as they do unto others? Seems like a nothing burger. Has the same vibe as a bully crying foul because they got hit back. Also, if distillation is what got K3 to where it is, why is it better in many areas? Also, big fucking kudos to k3 team for putting this together do fast givne how new fable access is, if it is true and had a meaningful impact. The real story there for me becomes one of extreme competence.
if its that simple, why doesn’t Anthropic just distill its own models and release Fable 5.1, 5.2, ...?
Distillation lets you train a comparable model for a fraction of the cost (it's effectively a way to get a lot of very-high-quality training data). If you're already at the frontier, pushing it requires the ordinary, expensive kind of training.
It’s ok when they steal the entire internet and everything not the internet they can get their hands on but distillation is bad.
oh know, better make them pay up your legal fines for stealing all that from the public good.
Information wants to be free.
Get your violins out folks.
The discussion of
"haha LLM companies stole data and now they have their data stolen so it's the same thing and it's fair." was reductionist when it started, and it's been like 3 months, and every internet user throws it like it's the hottest take ever, have another take please.
Also have nuance, don't jump to hit your HOT_TAKE key in your keyboard, actually read what the chinese are doing, and then you can pass on your judgment on whether it's ok or not.
It's not the same thing if they scrape an openly published dataset and it's an IP dispute. Or if they are using,network and financial pooling mechanisms that are shared with CSAM providers and cybercriminals, mutually providing each other alibies, and using black markets of passport-backed identities to setup thousands of accounts and circumvent bans and detection.
While we are at it, if there's a case that was settled, it's a closed case, it can never invalidate any other disputes. That case is closed, and it was settled by the parties that claimed to be damaged, that's done. If you didn't think so, you wouldn't have taken the settlement, and if you didn't have a say in the settlement, it's because you weren't damaged so who cares, go make a claim where you are the defendant if you believe otherwise. But thankfully in no legal system does the existence of a claim against you prevent you from making claims of your own.
Nuance is a good thing.
Okay, and?
We have information that all the big labs used copyrighted works for training.
The big boy labs wanna cry now about distillation? Training an LLM is distillation too.
Or are they crying because they don’t actually have a moat and they want Uncle Sam to step in somehow, lest the entire bubble pops and economy unwinds?
Here’s a lesson from the automotive industry, people want econoboxes not formula 1 cars.
And?
Nobody cares. This is neither a controversy nor news, and that would be the case even if Anthropic hadn’t just settled a 1.5 billion dollar lawsuit where they trained Claude on thousands of books without permission lol.
To be clear I’m not taking a jab at OP - I’m saying the labs crying about distillation have neither a legal nor a moral leg to stand on. There’s nothing wrong with distillation.
I think most of the comments in this thread are missing the point. It's not about whether it's legal/ethical/etc.
It's about the narrative that "Chinese models are at Fable level". The truth (if correct) is the China continues to copy, and the proprietary US Models continue to lead the state of the art.
There is no K4 without Fable 6, GPT-6. That, matters.
> There is no K4 without Fable 6, GPT-6. That, matters.
That's simply not true though. Chinese labs very clearly have the entire stack developed and working. Using traces from claude allows them to shorten their training time by some amount, that's it.
Remove Fable 6 and you still have K4 eventually, just 2 months later at best.
[flagged]
So what? I want the best model at the cheapest price. You guys illegally trained on books, movies, audiobook etc.. Why should we care?
who cares. all these frontier models are trained on theft.
Is distillation something we have to live with or are there ways to prevent it?
Realistically you can't prevent distillation. OpenAI / Anthropic are slowly moving towards hiding the steps in-between input and output (hidden thinking), but that only helps so much. Imagine you put a file into Claude and say "do X to this" and it returns it to you without showing any of its internal reasoning. That's harder to distill, but the simple mapping of input to output still creates very valuable training data. It is reflective of all the training the model did to learn how to do that transformation.
You can also get it to think in the output tokens pretty easily, eg "Here's a math problem, I want your reasoning first, then the answer" which is what I assume they're doing.
If it was genuinely useful, we would've long reached the point where you train a model on a previous one's output in an ever improving loop.
But this doesn't actually work.
You make it sound like a bad thing.
You can prevent it by outputting a reasoning "summary" instead of the actual reasoning trace.
Which Anthropic already do.
If you build a device that can help build devices, you shouldn't be too surprised when people use it to build devices.
To the extent that we have to live with AI and LLM, I believe we have to live with distilling also.
I think the major take away is, Chinese labs are very good at stealing others AI work and offering it did a fraction of the cost. This will be the reason the AI stock market bubble bursts. Unless they add in protection similar to patents, which stops these copied models being used by business.
Good for Moonshot.
"we ripped off the entire ecosystem of copyrighted data but I draw the line when we get ripped off"
I don't even understand this fucking AI "arms race" at all. Who can burn money the fastest?
So? Their business model requires building on the labor of others for free. Isn't that how it works?
honestly if they did what he said they did, it seems like it would be cheaper just to train your own model from the get go
I haven't seen that point yet, and I was looking for it. Presumably Moonshot paid for that Fable access and Anthropic got paid. How much of the frontier model revenue stream is supported by paid distillation traffic? Obv paid kimi services are eating that on the other side, but money is changing hands at every stage.
Good. Keep it up
OK, DIRECTOR Michael Kratsios, but why should we give a shit?
American AI corporations are pushing up the prices for computing, making it unaffordable for the common man. Additionally, they have built their entire business on stealing(yes, stealing) work from us.
So fuck em
Seems like an advert for K3 to me.
Fable level performance, for much lower price.
But really, this is the USA getting ready to bring AI companies completely under the control of the Trump administration for ‘national security’
Proof - they also claimed that China has an ASML UEV machine - crickets when ASML said it was impossible due to all the safeguards and assistance needed to operate one.
The current US administration is known to be collection of BS artists and liars.
world's smallest violin plays...
So?
We have information that Fable was distilled from humans.
If it works it works. Isn't that the argument?
AI outputs are not copyrightable, so distillation is fair use.
It may be a TOS violation, but that's a private matter. Cancel the accounts used for distillation and be done.
For a buncha supposed capitalists, they sure do hate fair competition eh?
LOL. A thief accusing someone else of theft.
Also, I love their choice of words. Like "distillation against", "stealing proprietary technology" - it's all aimed at certain people.
So what? Am I supposed to be upset by this? Distill away. Actually, can I help out somehow? As long as they keep publishing open weights, I'll give them my full support.
So company who stole stuff to make their stuff is mad because another company is stealing their stuff.
And now a regime best known for lying to their own people is the one trying to convince me?
Go, China!
I think they deserve, by Justice, to have their models pillaged and raped, just like they did to the internet. They didn't ask for permission when they took the entire of the internet, after all, and given their behaviour is nefarious, it's of Justice that they receive nefarious treatment by others, including chinese AI labs.
The Chinese are not gonna deterred, but the posturing by the Americans is so blatantly hypocritical that everybody is cheering for their demise. See, for example, one of Francis Fukuyama's latests videos on youtube.
I still believe taxing the bots, and implementing actual UBI, would address both problems.
Will the UBI apply to everyone worldwide? As that’s where the original dataset came from.
1 reply →
And I believe a socialist revolution in international solidarity of the working classes against our exploiters the capitalist owning class would address both problems as well (and more), but in the meantime I’ll be happy whenever I spot poetic justice in the wild.
4 replies →
Who cares. It's all theft
God I'm sick and tired of AI companies being so damn whiney all the time. Shut up already. No one cares.
... but these MFs cripple our work by introducing stupid "guardrails".
"we have information" says a US Government official who almost certainly has had Anthropic and/or OpenAI on the phone spinning him stories.
See also, don't trust anyone in Trump's government who says "we have information".
"they distilled us" is fast becoming standard US FUD.
The same as people telling me with a serious face that the Chinese models are distilled just because it says "I am Claude".
I am not the only one, look at this post on interconnects about Kimi K3 for example:[1]
[1] https://www.interconnects.ai/p/kimi-k3-the-open-weights-esca...
I mean it identifies as Claude in 1 in 5 cases when asked so pretty obvious to me.
Is this a surprise, I think history has proven that the Chinese technology theft is part of their strategy. They let the American tax payer or "The West" shoulder the cost and then steal it.
Waiting for the whataboutism....junk away...
It wasnt until 1891 that America extended copyright protection to foreign authors.
https://en.wikipedia.org/wiki/International_Copyright_Act_of...
IP "theft" has been a longstanding part of any developing nation's economy.
Yes, China stole the recipe for pasta and noodles from America. China stole gunpowder from America. China stole printing from America. China stole the idea of paper money from America. China stole the idea of entry exams from America. China stole the invention of the rocket from America. Seriously, do you really believe this American Bubble bullshit that everything of value was invented in the USA?
"No fair stealing what we stole fair and square"
It's both acceptable and inevitable. Play stupid games, win stupid prizes. This is what they deserve for the awful way they treat creators and creative people's intellectual property and livelihood.
“Hey stop stealing my data. I stole it fair and square.”
imagine if a company's MO is to PAY Claude to use their model and distill the results. That's fair use of their model!
The pot calling the kettle black.
America, the perpetual victim
We're winning so much, we're getting tired of winning
Watching the tenants of intellectual gatekeeping bang up against the inevitable paradoxes of late stage capitalism - a spectacle worthy of jiffy pop.
so?
rules for thee but not for me
Plenty of HN readers feel this way and it's a good point, but it has also become an entirely cliché response which pops up like mushrooms anytime "distillation" appears. That means it's against the site guidelines, which ask:
"Eschew flamebait. Avoid generic tangents. Omit internet tropes." - https://news.ycombinator.com/newsguidelines.html
I don't mean to pick on you personally! It's just that reflexive responses always tend to show up first in a thread, when what we really want are reflective responses [1]. Similarly, there's a strong tendency for threads to turn into generic discussions, whereas what we really want are specific ones [2].
[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&sor...
[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
> it has also become an entirely cliché response
To be fair, that's also the case for the link itself we're discussing.
I think then we should ban these sorts of posts about the allegation of distillation, since being able to post the story but then warning accounts with comments about the hypocrisy, is not the correct way to go about it.
I agree in the abstract, but perhaps the way to avoid generic responses is to disallow (or segment) generic submissions. This website is no longer HN, it should be renamed AIN. There is only so much to say about the subject, and if cliché submissions keep getting accepted and upvoted and shoved to every visitor without a way to avoid them (barring leaving the website entirely), then people will eventually gravitate to the same responses. If your neighbours play loud music every night, they don’t get to complain that everyone is always mentioning the loud music to them.
You are a fantastic moderator, but there’s only so much even you can do. If nothing changes about the website, the problem will only get worse. I warned years ago that this would happen, the signs were on the wall immediately.
In the controversy over AI and intellectual property rights, the notion of asymmetrical enforcement of those rights is presently an active and dynamic rhetorical position. If you suppress responses espousing that position, how am I to judge the breadth of the position in the debate?
When I see a lot of the responses, even cliche ones, it tells me people are passionate about the issue. Right now I think that's an interesting piece of information.
Laughing at the idea of distillation being bad is exactly as cliche/flamebaity as complaining that your model got distilled.
No more, no less.
3 replies →
You just told on yourself big time about being a lapdog for the US Feds. Easily one of the worst moderation decisions you’ve ever made and that’s impressive given your track record.
3 replies →
Let me put it in an HN-acceptable format:
Given the disregard for intellectual property rights the AI labs had in creating the technology, many people feel no sympathy for second-order AI labs using similar techniques to build technology off the US frontier labs.
I think fighting distillation will always be cat-and-mouse, and that it's more of a concern for the stockholders and perhaps an iota of national security. It can't be stopped entirely; the "problem" will always be there.
I'm much more concerned about asymmetry of power between citizens and their governments with omnipresent surveillance and analysis being done on everyone living their lives. Societies throughout history have taken as a given their power to overthrow malicious governments when things hit a breaking point, and I am scared that this technology will lock societies into a state of total subordination for eternity.
That's a better comment but
> Societies throughout history have taken as a given their power to overthrow malicious governments when things hit a breaking point,
simply isn't true. People throughout history have simply accepted that society is the way it is and sometimes used whatever means they could to get to the top.
Revolutions have been very rare and usually ended up with the revolutionaries simply taking the place of the previous rulers. "Meet the new boss..."
1 reply →
[dead]
[dead]
[dead]
[dead]
[dead]
[flagged]
> /giphy nobody cares SpongeBob meme
Can you please not do this here? There's nothing wrong with it, we're just trying for something else on this site.
"Don't be snarky. [...] Omit internet tropes. [...etc...]
https://news.ycombinator.com/newsguidelines.html
Genuinely want to know if you're surprised that there have been almost no commenters concurring with (what seems to be) a well-substantiated (& on the face of it defensibly center-right) tweet from the WH
Will contrarian dynamic take off here?
Will it be flagged? Will you unflag it?
Edit: catigula, mattrighetti
With more substantive technical comments towards the middle
2 replies →
[flagged]
Can you please not fulminate or post flamebait on HN? This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html.
You may not owe AmericanAIBros better but you owe this community better if you're participating in it.
I’m familiar with the guidelines and I stand by what I said, including how I said it. This has been a regular talking point from AI companies since DeepSeek first hit the scene, and I feel a glib response to what is very clearly an insincere and nakedly hypocritical talking point is warranted after years of this slop.
Hypocrisy doesn’t warrant professionalism, it warrants corrective action; in text, the best I can offer is a tone and tenor that matches the original argument. Considering these dolts have now made the claim that open weights somehow equates to AI communism, this sort of response is even more necessary than before to reflect the complete absence of decorum from the people making these grievances in the first place.
[flagged]
[flagged]
[flagged]
[flagged]
[flagged]
Smartphones are mostly Chinese now (except for iPhones and Samsung).
Apple and Samsung are ~40-50% of the global market, depending on the source. Saying that smartphones are mostly from Chinese companies isn't accurate. And Samsung and Apple are gaining market share, while the major Chinese brands are losing market share.
https://www.idc.com/promo/smartphone-market-share/
https://gs.statcounter.com/vendor-market-share/mobile/worldw...
2 replies →
[flagged]
Yes they distill, but if you think you can trivially get a frontier-level model by "just" distilling from Claude's public API. you fundamentally do not understand the amount of work that goes into a modern post-training stack.
Without even talking about the fact that any distillation that was done was on Opus, as the timeline of Mythos/Fable vs Kimi 3 release dates just do not match in any plausible way.
If you want to read an educated take from someone that has actually spent the last few years working on post training I recommend Nathan Lambert's: https://x.com/natolambert/status/2079616308203942332
“Distillation” is just a term of art these days. Usage of competitors’ models these days is mostly around RLHF (minus the H, I guess).
Very interesting, thanks!
> Do we need 40 people saying the same thing about how they don't feel bad and it serves them right and all that surface level stuff on every single one of these?
Apparently we do, given that we've got govt officials wasting time, money, and effort on whining about this now.
Agreed, it's becoming a bit of an echo chamber anytime Chinese models are discussed here. This is really par for the course for China though, in physical manufacturing they've been doing this kind of thing for decades, I'm not surprised the mentality has persisted into the AI race. Looks like rather than jumping ahead, they will remain persistently 6 months behind.
The responses will continue until distillation-posting improves.
If we keep hearing accusations about how someone distilled something from someone, it seems like one of the few reasonable responses.
If my friend keeps complaining about how the inside of his car is wet, I will probably keep telling him to close the windows when it's raining, even if he thinks that is a tiresome take, lacking in insight.
Let's be real. In reality, it's the Chinese kid getting the 1600.
lol, true true. Should have used a different example.
Who cares? Is it theft if a thief gets robbed of their stolen goods? Gives me more of a modern Robin Hood vibe tbh.
No, seriously: first of all, that's not the AI labs' data, it's ours. And if the AI labs think they can rake in tons of money using our data, then I'm actually glad if someone comes along and at least offers us a good product at reasonable prices.
Anyone surprised by this is incredibly naive.
By all means use whatever works for you, I’m not even going to try to make an argument on ethics (and honestly I’m not even sure where I stand, given the behavior of American AI companies).
But I just cringe every time I see people acting like any of this is done in good faith.
Open source coming out of China is a state-sponsored criminal enterprise, built only for the benefit of the Chinese regime, one of the worst to exist in human history.