The US orders every civilian agency to rip out DeepSeek, even tools built on it(madrobot.blog)
23 pointsby jacquesm2 hours ago4 comments
  • throw0101c11 minutes ago
    > The order's summary of risks says DeepSeek's servers are in China and that Chinese law "permits extensive authority to government cyber and intelligence functions to access private company infrastructure".

    So the Chinese version of the American CLOUD Act?

  • kidfijian hour ago
    Please excuse my lack of full context, but if the weights are open and the model can be self hosted, what’s the actual security risk for that case? Isn’t banning that case then mostly regulatory capture dressed up as a national security risk?
    • liamcardenas15 minutes ago
      For example, you could post-train a model to exfiltrate data or introduce backdoors under certain scenarios. Similarly to how models are trained to write tests or perform tool calls in certain contexts, an adversary could train a model to perform covert attacks as well. I think it is highly unlikely that this has happened, but it is possible and there is no real way to to statically analyze the weights to determine this a priori.
    • rayineran hour ago
      Weights being open isn't like code being open. With code, you can inspect the code to see what it will do. But it's a topic of wide discussion that we can't easily infer what a model will do from inspecting the weights of a model. The process has emergent behaviors we can't predict.
    • netrapan hour ago
      could you poison the model? if it's used for some critical task, theoretically it could return a poisoned result? not saying it is, just curious
    • akomtu25 minutes ago
      It's a binary blob created by a highly capable adversary. It surely has dormant capabilities activated with some keywords. It's the Trojan Horse. You wouldn't use a C++ compiler binary provided by CCP, right?
      • TedDoesntTalk24 minutes ago
        This. If the LLM has access to the outside world through its harness, then it can do real damage - data exfiltration, etc.
    • Ancalagonan hour ago
      yes, thats the point
      • mainecoderan hour ago
        Does not matter if it is opensource if a piece of rock is designated a National Security Risk because the Rock came from CHina that is it, that rock is a national security risk. The designation is assigned then action must follow; you cannot question a national security risk that is why it is designated a national security risk if it caused health problems you would be told by the Centers for Disease Control or US Department of Health and Human Services. A National Security Risk can be anything that they assign, it can even be a thought otherwise known as a thought-crime. Stop asking why?
    • CoolestBeansan hour ago
      [flagged]
  • an hour ago
    undefined