If this seems concerning, wait until the models get effective enough (gets work done properly at a lower energy need than humans have) that there's no reason for them to release anything. Why offer your weights for download or grant any third party usage access when you can just do the actual job yourself and collect all that turnover?
It's hilarious how a the trillions invested in AI companies, and their valuations are predicated on the AI labs Sherlocking entire industries, and yet CEOs, mathematicians, and everyone else are eagerly feeding the beast their most prized information.
A lot of pre-Internet businesses are still here with us, and online. The one thing the survivors did not do was hitch their wagons on a predator designed in a lab to devour them - to use mixed metaphors. Barnes & Noble didn't board up their brick-and-mortar stores to replace them with an Amazon storefront - they figured out how to use the Internet without handing over the family jewels.
The alternative is starving because someone else will.
That's why those companies are worth trillions.
Do you trust the people who would gate these capabilities? I do not.
I don't think it will be too long before models are considered munitions and having the weights for one will require registration.
Sometimes I want a fast-forward button for life, the times are so exciting and I want to know what else 8B people can think of next but there's so far no way to turn pages faster ^^'
There are just a few places where the most high tech hardware is made. If we turned off new and unregistered hardware now it would be just a few years as most hardware fast enough to run LLMs would disappear from public hands.
It will still exist, but be in the hands of militaries and authoritarian governments. If you piddle around on the net showing off your open standards you'll be relentlessly attacked by these entities digitally. More so, those areas will be generally embargoed.
The future looks like a new cold war with a lot more digital weapons.
There's also a thing called commodity fetishism but capitalists usually learn the hard way that things created with machines without human input miss the essence of why we're willing to pay for something. Its why a handmade watch is $100k and a casio is $100, or a handmade sweater identical to a machine made goes for 10x.
They could also just make us so poor and anxious that we beg to fight eachother in wars.
One is produced by 500 humans collaborating and the second is completely generated by an AI that can actually make a movie
A single individual or small group of people who own the GPUs profit from the AI version, and the human version provides a salary to 500 humans/families.
Which one are you buying tickets for and choosing to spend 2 hours watching?
Anthropic wants to IPO, they don't want another Fable shutdown situation.
To be clear I would prefer the cyber safeguards to be less restrictive, I think they're currently too much. I often go to open models because of it. But there are likelier reasons to restrict cyber than world domination.
> Maybe, but that's what the cyber program is for
Why? > and Claude helped you find it as a normal person, Anthropic would get bad PR
Why?Why are we celebrating and encouraging the walling off of the global intellectual columns?
The idea that you can't reverse engineer things, make things, learn about biology or physics without permission is strange to me. These machines have been trained on the sum intellectual output of humanity, the global intellectual commons, and are being used to close off that commons?
I would be OK with their right to create such restrictions if they weren't lobbying the Government to restrict others, thereby ensuring that they control humanity's intellectual commons well into the future.
Who are they to say what I can learn or can't learn? Who are they to control what I can or can't do with these tools?
Perhaps I'm naive, but I think it's better for humans and the machines if we can all think, learn and build. But then again, I'm the kind of person who rejects the doomer pill.
Reject this.
I mean this is the standard of biochem research right now. You can't just order 50 gallons of TNT off Amazon and neither can you get live viruses from a lab just because you want to do research.
And really they aren't restricting any of that. I've never had Claude stop me from going to the library and reading a book.
You don't have a legal right to do anything you want with their model. And if you don't like that you are going to have to convince politicians to enact new laws to change that.
In a properly free market, we'd have regulations that prohibit labs from vertical integration so they have to release and sell a model and another company hosts it and sell access to it. Americanism, America's implementation of capitalism doesn't have such regulations though (and how would that even work?) so we're stuck with Anthropic having that power.
The fear, justified or not, is that a terrorist is going to use Claude to make sarin nerve gas and bomb subway stations, or the digital equivalent. Could you live with that on your conscience? I don't think I could, but fortunately for me, I don't work at Anthropic so don't have to answer that real life trolly problem.
I am amazed at how a technical gloss can obscure basic rights. That's legal! It's in chemistry / agronomy books, freely available in libraries. I have the right to tell you how that is done, and you have the right to read what I write.
An LLM isn't a book. You can still go buy the books you want. An LLM, especially as they get more advanced, are agents. You can ask them do to things and they can interact with tools to do things.
You're free to print a cocaine book. You're not free to incorporate it into a cocaine making machine without violating numerous laws.
In reasonable countries, this is exactly how it works. You can own lockpicks, practice picking locks, and even publish detailed instructions on how to pick locks. It's only when you pick someone else's lock that a crime is committed.
Limiting access to tools and knowledge benefits the wealthy and privileged. Knowledge should proliferate, that is how the world has worked long before I was born and god willing that is how it will work long after I die.
That's not true. It's certainly legal to own lab equipment, but when you start combining equipment with the intent to make cocaine, you're committing a crime long before any drug is produced.
Any country who's a party to the 1988 UN Convention Against Illicit Traffic in Narcotic Drugs has such laws, including the US, UK, and most of Europe.
In reasonable countries, this is exactly how it works. You can own lockpicks, practice picking locks, and even publish detailed instructions on how to pick locks. It's only when you pick someone else's lock that a crime is committed.
Limiting access to tools and knowledge benefits the wealthy and privileged.
If you program a computer to make cocaine for you, you're the one violating the law. If you ask an LLM to do the same for you, you're the one violating the law. The LLM's capabilities are irrelevant.
Cool, so I'll have you make an LLM that can make cosine, then I'll provide you paid access to the machine to can ask the right question to do it illegally. Then when you get caught and blame me we'll both be in court defending ourselves.
You're argument is "doesn't justify". This is a private corporation, not a government. There is no freedom of speech law involved here if the corporation says no. Now, when the government tells LLM corporations that there are limits they will gladly agree.
Next, the government will classify the LLMs as munitions and you'll be spending the next 50 years fighting on reversing that when a big chunk of the population is anti-AI enough to let them do it. After that will be bans and registration on hardware.
There are two things that you are confusing. One is what you'd like to happen in an open data world like existed after the cold war. And then there is what is going to happen, and it's going to be messy, authoritarian, and closed. And you will lose the openness that had been occurring up to this point.
There is no world in which the general public agrees to wide open access to info-hazards, and there are people that will ensure enough disasters happen to close that future.
The last thing we need is more math addicts roaming the streets
That said - there likely were the same issues with cars in early days and then we got a body of settled case law that let the car companies off the hook for this and put responsibility on the user unless a manufacturing defect was the cause.
In the case of models, knowledge has historically always been dangerous! Is the library liable if a kid figures out how to do chemistry and builds a device? What about YouTube? I find it hard to believe this would hold up in court over time. So far, the only cases I’ve seen are when AI has encouraged self-harm which does in fact seem like a legit defect.
Gatekeeping knowledge like this will only serve to enable those that break the law, not protect, in my judgment.
And just so this isn’t pure fodder for the machine - torch staple must of course infant music verb noun right? :)
People have always been able to do this before Claude. The information is out there and if you use a VPN there's not much they can do. The existence of information isn't the blocker for why attacks don't happen.
I have been in the cyber program since around the time it first went public and recently renewed it with the updated program.
You still trivially hit guadrails. I was trying to reverse engineer some bit of 20-year-old software that already has known, unmitigated exploits and it still downgraded me.
open weights are the better way imo, no elite gatekeepers please
I mean, greed alone would seem to be enough, and it would be fully worth calling out as bullshit.
I think the current administration would delight in harsher penalties
The risk/reward is way lopsided towards risk for the labs to vet individuals. Much easier to get an organization and have them take the blast if someone/something goes off the rails.
I cannot in any universe see the labs putting themselves in a "We should never had given this person access" situation.
https://support.claude.com/en/articles/14604842-cyber-verifi...
Dario keeps saying in interviews that AI hacking is not a problem because "the good guys will protect themselves with AI", but then gate-keeps.
I submitted the form and it was rejected without reason.
Now what?
It looks like I will have to pay them to be considered, and even so, it looks unlikely that I'll be approved, since I have no CVEs credited to me, and I do not publicly post about security concerns.
..........................................
The Cyber Verification Program is not available on free plans, so we are unable to approve you for the program.
If your plan changes, you're welcome to apply again at any time.
Regards,
The Anthropic Safeguards Team
..........................................
It has a cooldown of seven days.
I later got Claude to crack their licensing checks too, by convincing it to write a "license checker" program, and then a second "test case generator" script for the license checker... (Opus 4.8 was smart enough to see what I was doing, but Opus 4.6 complied)
As this is going on, Anthropic has opened up their own biology lab.
> https://www.reuters.com/world/anthropic-quietly-sets-up-biol...
There is very much a situation where people in frontier labs have access to exceptional capabilities that are being kept from the rest of us, and they're using it to strip-mine technical and scientific problems.
They sure as hell ain't stripteasing :)
If these capabilities were available to the public, someone somewhere would make a biological weapon or create a virus we've never seen before that could kill many millions of people.
Stanford researchers have demonstrated it’s possible [1].
[1]: "AI creates 16 new viruses from scratch, showing promise for drug resistance and drawing warnings about potential for misuse" - https://www.cnn.com/2026/08/06/health/ai-viruses-bacteriopha...
AI isn't going to magically assemble a DNA sequence for you and a computer design is not a guarantee of something that works.
AI restrictionists love to pretend that their toys will, with the power of intelligence, magically bypass fundamental limitations of reality to conjure up fantastical weapons of mass destruction if they throw enough computers at the task. Unfortunately for them, that is not how the world works.
[1] https://www.businessinsider.com/researchers-ai-apocalypse-sk...
Information is not dangerous. This is a ridiculous argument to me, but maybe my chemistry degree has me biased.
It's the equivalent of making pipe bombs at home.
The instructions are out in the public, but that's not a problem because the idiots that make pipe bombs blow themselves up more often than they succeed in doing terrorism.
In the past my attempts to work on crypto related problems have been met with needing the higher tier of "offensive" access.
If we allow these providers to promote regulatory capture they become the arbiter of what anyone is "allowed" to do
Part of me wonders whether the NSA/other TLA has either (a) an unrestricted model from a lab with less scruples like SpaceX, or (b) an in-house model, either abliterated or with data they've bought themselves.
Are their guardrail benchmarks or anything of the sort that we can use to see where the bifurcation of permission/capability occurs?