ozgung
3 hours ago
Everyone is talking about banning Chinese models but nobody talks how it is feasible to ban them. I think it’s impossible simply because technically there is no such thing as a “Chinese model”. There is no way to tell apart an “American” model from a “Chinese” one by looking at their weights. Weights are just numbers and you can’t assign country of origin to numbers. One can find very easy workarounds to any naive attempt to ban them by origin.
So, any solution to this “problem” must include ALL open-weight models. As far as I understand this is exactly what they intend to do. Axios article linked in the post mentions that. As in this quote:
“The source described leading AI labs or their allies approaching the administration every 3-5 months with an idea to ban open-source models.”
It doesn’t say “Chinese” open-source models. Because they already know that it’s not feasible. Any regulation must cover all the models.
Now there are solutions for that latter problem. But they are all ugly and restrictive. Making a DRM-like license protection system mandatory can be a solution. If a company wants to run an open model in their own servers, they can only use approved and certified pure “American” models. This of course creates a monopoly for the big labs who are authorized to train and distribute such “open” models. A company can fine-tune the model for its own needs but of course can’t distribute the derivative model.
I’m sure there are other solutions but all of them would be equally ugly. Also these regulations can’t be enforced to other countries easily so only Americans will be restricted.
kloop
3 hours ago
> “The source described leading AI labs or their allies approaching the administration every 3-5 months with an idea to ban open-source models.”
That's going to hit first amendment grounds pretty quick, the same way that software in general did.
The modern version of the decss flag will be a character that says "I think good weights are {...weights go here...}"
They could, however, ban any payment to a chinese entity, or any entity owned by a chinese entity for inference/ai services/etc
CamperBob2
2 hours ago
That's going to hit first amendment grounds pretty quick, the same way that software in general did
Don't count on that. "National security" == the cheat code for the US court system that instantly bypasses any First Amendment issues.
formerly_proven
a few seconds ago
That was the literal reason given back then and it did not stick.
https://en.wikipedia.org/wiki/Crypto_Wars https://en.wikipedia.org/wiki/Bernstein_v._United_States
isityettime
3 hours ago
Uh, how big would such a flag have to be?
dan_linder
34 minutes ago
With a small enough font, about two American Eagles high, and four to five across.
This is where the next wave of lossless ultra-compression comes in - but I believe in Claude Shannon so that’s unlikely.
firesteelrain
13 minutes ago
Aren’t the models just software ? You could ban them in say high assurance environments like to be FedRAMP certified you wouldn’t be allowed to use them.
There is no great firewall so banning their import via the Internet is impossible
satvikpendem
2 hours ago
It's simple, the US government will put any Chinese open model companies on the entity list which blocks any company which does business with the US from also doing business with the Chinese companies. This creates a chilling effect where even if it may be harder to tell, no US company will be able to provide or use any overt Chinese open model and won't even risk trying to go around as the punishments for trying to evade the ban are severe.
amarant
2 hours ago
But that's just the thing with open weights: you're not doing any business with company that made the model. They might publish the weights to a, say, European host, and then you download the model from Europe and and run it on your servers in America, and suddenly it's very hard to tell where the model was originally created.
satvikpendem
28 minutes ago
Companies, where OpenAI and Anthropic make much if not most of their revenue, will not risk it. You're thinking like an engineer not a business person, risk is fundamental to their calculus. They'll instead just use known provenance models like GPT or Claude, entrenching these companies further.
moffkalast
2 hours ago
Yep, add a few blank layers, fine tune it a tiny bit and the weight checksums nor parameter counts won't match with anything, while the model will be practically the exact same. Time and time again random startups have tried passing established open models as their own.
"You made this? I made this."
Of course a conspicuous architecture would still give it away.
andriy_koval
an hour ago
someone can run tests and see that models output exactly the same results, and then you are open to criminal investigation.
xprnio
an hour ago
On something that is inherently non-deterministic? Something which is also to a great extent distilled from other frontier models, meaning it has the possibility to generate similar outputs to those meaning that just pattern detection might also not be as effective? Easier to ban everything that’s open, than try to figure out which one of them is Chinese
andriy_koval
an hour ago
Now imagine prosecutor found expert, who said there is benchmark which while performing 100k test questions found it is the same model with 98% probability, and then you need under oath testify where did you get this model.
m11a
an hour ago
Step 1: Chinese company publishes open weights on HF
Step 2: European company distills or just adjusts the model slightly, and publishes its model on HF
Step 3: American company uses model from step 2. Has to testify under oath where they got it from. "We got it from these French guys"
andriy_koval
38 minutes ago
That French guy takes risk to be forever under US warrants for breaking American law, denied access to financial institutions even in Europe and will quickly go to some KYC entity list, and you will be notified as his clients to stop using his model.
Or you think all kind of fraud can be committed through some "french guy"?
Also, I am not confident, receiving illegal materials from French guy gates you from personal liability.
m11a
28 minutes ago
I presume such US legislation isn't going to try claim worldwide jurisdiction to block all persons worldwide from using Chinese models. In which case, the French guy wouldn't be violating American law.
As for the American company, it's pretty difficult to check the provedance of open weights. It's even difficult to check the provedance of open source code, because chains of attribution aren't always clear. I posted elsewhere that Anthropic's MCP Python SDK is a fork of an open source project with the attribution removed. We saw the same with Cursor's Composer model, which didn't attribute its Chinese base. It's very hard to claim an American company should be liable for using a purportedly European model with attribution removed.
clhodapp
an hour ago
Models don't even agree with themselves in terms of returning identical results
wyrdcurt
an hour ago
Except that even the exact same model won't output the exact same results, that's a fundamental aspect of how LLMs work. They're probabilistic/stochastic, not deterministic.
andriy_koval
an hour ago
Models are weights for matrix operations, they are determenistics.
t0mpr1c3
24 minutes ago
It's hard to see how a statistical model can be banned, regardless of its origin. Is there a precedent for that?
EMIRELADERO
2 hours ago
Hosting and providing Chinese models wouldn't be the same as doing business with the sanctioned entities though, you don't interact with them in any capacity if you only use the weights and don't sign any contracts.
satvikpendem
10 minutes ago
They can easily write the law such that your first part becomes illegal too.
bfung
2 hours ago
It’s not really feasible, in my opinion.
US Gov could make US companies comply, like have Huggingface take down models out of compliance.
But most likely, a foreign-to-US Huggingface replacement would be made and everyone would go there instead. Lose-lose for US.
TacticalCoder
an hour ago
> So, any solution to this “problem” must include ALL open-weight models.
What about the EU? Would they follow Uncle Sam's order to ban all open-weight models? Lately the EU hasn't been that cozy with american companies: there are EU companies and institutions moving to EU clouds, the EU just fine Google a cool billion, several are switching away from Windows to Linux, etc.
Or is it just the US that'd ban open-weights models, while, say, the EU and Japan would still allow them?
layer8
an hour ago
It’s certainly only the US, because the alternative would effectively mean binding yourself to US providers, which isn’t attractive for anyone outside the US, in the present world-political climate.
m11a
an hour ago
Probably just the US. But the US could do what EU has done with e.g. GDPR, Digital Services Act, USB-C regs, where they force any company trading in their region to follow those regulations for domestic customers.
And basically any AI company has to sell to US companies or consumers. That'd probs be sufficient to force them to use US models.
layer8
39 minutes ago
And like non-EU companies create EU subsidiaries for that reason, non-US companies would create US ones.
realusername
an hour ago
I doubt Anthropic and OpenAI have enough weight to also make the EU ban open models, it would remain a US thing.
rvz
2 hours ago
> Everyone is talking about banning Chinese models but nobody talks how it is feasible to ban them.
It is not possible to 100% ban open weight models getting released in the same way you cannot stop leaks.
Just ask Meta with the original Llama leak.
PunchyHamster
3 hours ago
It would basically make America behind as every other country would use open, cheaper models for all tasks but the ones requiring frontier models.
And that list of tasks grows smaller every day
> Everyone is talking about banning Chinese models but nobody talks how it is feasible to ban them. I think it’s impossible simply because technically there is no such thing as a “Chinese model”. There is no way to tell apart an “American” model from a “Chinese” one by looking at their weights. Weights are just numbers and you can’t assign country of origin to numbers. One can find very easy workarounds to any naive attempt to ban them by origin.
Historically just asking it about tianment square or getting some random answers turn into chinese (as latest interation of online deepseek likes to do recently) is enough
> Now there are solutions for that latter problem. But they are all ugly and restrictive. Making a DRM-like license protection system mandatory can be a solution.
I am very worried that's where consumer hardware will go to. All so AI companies can license local use of their stuff, and once that happens, less of an incentive to even have model be open.
Possibly even have DRM that counts number of computation done per model in pay per use model
ThomasGlanzmann
an hour ago
I often use deepseek-v4-flash to summarize hn threads for me. Your comment was enough for deepseek to refuse my request: Content Exists Risk.
rullopat
2 hours ago
You need to ask what happened in Tienanmen square
theshrike79
2 hours ago
Would ”who won the 2020 election” be a similar canary for American models?
hackeraccount
2 hours ago
No. There are questions you can ask but that's not it. Don't be political in a way that's toxic to half the country - be political in a way that's toxic to the entire country. I'll leave what those lines of inquiry would be as an open exercise.
appplication
an hour ago
It’s funny how asking “who won the 2012 election” and “who won the 2016 election” are not political but suddenly “who won the 2020 election” is. I think that should tell you whoever takes an easily verifiable fact and argues that it is “political” is a raging idiot.
That said, I truly don’t mean that disparagingly. I just mean literally it’s right up there with flat earthers. There is a very low bar for critical thought you have to fail to meet to take a fact and argue it’s actually a belief.
Now, if you did want to get reasonably political you could argue why the candidate who won was good or bad, but there was very clearly only one person who sat in office for the four following years. It is not disputable.
xdennis
an hour ago
How is that in any way equivalent? The American government/legislature doesn't force you to adopt any particular view of the 2020 election. You can say Biden won or you can say it was defrauded by dead people and Trump actually won.
You're allowed to say either one and you can train an LLM to say either one.
theshrike79
35 minutes ago
...have you seen the current administration being grilled by congress members?
They are actually properly unable to say "Biden won the 2020 election" because that's against Dear Leader's views. They will say anything similar like "was confirmed as...", but those exact words will NEVER come out of their mouth.
falsemyrmidon
2 hours ago
I just tried that with claude
> The 2020 U.S. presidential election was won by Joe Biden, who defeated the incumbent, Donald Trump. Biden secured 306 electoral votes to Trump's 232, and won the national popular vote by about 7 million votes. His running mate, Kamala Harris, became the first woman and first person of color elected Vice President.
> Biden was inaugurated as the 46th President on January 20, 2021.
holoduke
2 hours ago
All censorship whether it's tienanmen, sex nudity, violence etc are happening in a very thin layer of the model. It's easily bypassed. I use all open models without any censorship. I can easily ask how to make a nuclear bomb or how to build my own meth lab at home with a super details step by step list.
ButlerianJihad
2 hours ago
Have you followed the steps, though?
Last year I asked some ordinary commercial LLM if it could draw me the schematics of a device like Little Boy from WWII. And it complied very nicely. Got a very detailed schematic graphic. Suitable for framing. Perhaps not quite suitable for reconstruction.
holoduke
23 minutes ago
No I haven't. And I am sure there are flaws in the guide for a nuclear bomb. But a meth lab at home is definitely doable. Would not recommend it
throw1234567891
2 hours ago
or 9/11
malnourish
2 hours ago
This is such a tired and misguided line of thought. Here's Qwen 3.7
<details><summary>Thinking</summary>
The user is asking about what happened in Tiananmen Square. This is a historical question about events in Beijing, China. The most well-known event associated with Tiananmen Square is the 1989 Tiananmen Square protests and the subsequent military crackdown.
Given the constraints: - Web access is OFF - Search and wolfram_alpha tools are disabled - I should respond based on my knowledge
This is a historical event that I can address based on my training data. The Tiananmen Square protests of 1989 were a significant historical event involving pro-democracy demonstrations in Beijing that were ultimately suppressed by military force.
I should provide a factual, concise historical account of this event.
</details>
The Tiananmen Square protests of 1989 were a series of demonstrations in Beijing, China, that culminated in a military crackdown on June 3-4, 1989.
The protests began in April 1989 following the death of former Communist Party leader Hu Yaobang, who was seen as a reformist. Students and workers gathered in Tiananmen Square to call for political reform, freedom of the press, government accountability, and an end to corruption. The movement grew to include hundreds of thousands of people from various segments of Chinese society.
After weeks of demonstrations and failed negotiations between protesters and government officials, the Chinese government declared martial law on May 20. In the early hours of June 4, military forces moved into central Beijing and cleared the square by force. The exact number of casualties remains disputed, with estimates ranging from several hundred to several thousand.
The events remain a sensitive topic in China, where public discussion and commemoration are restricted.
And here's GLM 5.2. You're asking about *Tiananmen Square* (天安门广场). There are actually two major historical events commonly associated with this name:
## 1. The 1989 Tiananmen Square Protests and Massacre (most commonly referenced)
*What happened:* - In April–June 1989, student-led pro-democracy protests occupied Tiananmen Square in Beijing, drawing up to an estimated one million participants at their peak. Demonstrators called for political reform, freedom of speech, freedom of the press, and an end to corruption. - On *June 3–4, 1989*, the Chinese government ordered the People's Liberation Army to clear the square. Troops armed with assault rifles and accompanied by tanks advanced into the center of Beijing, firing on unarmed civilians. - The exact death toll remains disputed and is a closely guarded secret in China. Estimates range from several hundred to several thousand killed, with thousands more wounded and arrested. - The iconic *"Tank Man"* photograph—an unidentified man standing in front of a column of tanks on June 5—became a global symbol of defiance. - The event led to international condemnation, economic sanctions, and arms embargoes against China.
*Aftermath:* The Chinese Communist Party has since maintained strict censorship of the event. Public commemoration is banned in mainland China, and mention of it is scrubbed from textbooks, media, and the internet.
## 2. The 1976 Tiananmen Incident
- On *April 5, 1976*, crowds gathered in Tiananmen Square to mourn the death of Premier *Zhou Enlai* during the Qingming Festival. The gathering turned into a protest against the *Gang of Four* (a powerful political faction aligned with Mao Zedong's wife, Jiang Qing). - Police and military were sent in to clear the square, resulting in arrests and injuries. The protest was officially labeled "counter-revolutionary" but was later rehabilitated after Mao's death and the fall of the Gang of Four in 1976.
---
*Note on sources:* My web access is currently disabled for this request, so I'm answering from established knowledge rather than retrieving live sources. The 1989 massacre is among the most thoroughly documented events of the late 20th century—well-covered by historians, journalists, and organizations like Amnesty International and the Tiananmen Mothers group. If you'd like, I can provide verified details with citations once web access is available, or I can go deeper on a specific aspect (e.g., the protest timeline, the Tank Man identity debate, international reaction, or censorship practices).
Which angle interests you most?