Encryption, spyware, and now Mythos: History shows why cyber export control doesn’t work
TL;DR
The US government ordered Anthropic to restrict Fable and Mythos for users outside the US and for foreign nationals inside the country. TechCrunch frames the dispute through earlier failures: export controls did not stop PGP encryption in the 1990s and only weakly constrained commercial spyware later. Anthropic had already limited Mythos to roughly 150 vetted companies and government organizations, after marketing it as a highly powerful cybersecurity model.
Nauti's Take
The hard line sounds politically strong, but it barely solves the technical problem. Software does not behave like tank parts, and the history from PGP to spyware makes that painfully clear.
A better path would be liability, mandatory safety testing, abuse monitoring, and real international baseline rules. Otherwise it becomes theater: defenders lose tools, while bad actors switch suppliers.
Briefingshow
This is bigger than Anthropic because it becomes a test case for AI export policy. Cyber models are dual-use: they can accelerate defenders, but they can also help attackers. If regulation only blocks access to US products while foreign alternatives keep improving, the main result may be a compliance drag on domestic labs.
Sources