47 comments

  • tristanj 2 hours ago
    Here's what is happening:

    Chinese resellers are offering Claude tokens at 70-90% below official Anthropic API prices. They achieve this by reselling capacity from pooled Claude Max accounts, payments fraud, and also reselling the model output & reasoning chains to various Chinese labs. They are subsidizing model access in exchange for user logs and reasoning traces, which they then sell as training data, allowing them to operate below cost.

    Claude and ChatGPT are both blocked in China. You need to use a VPN to access either, and you can't pay with a Chinese bank card. So most people who want access to Claude buy access via a reseller. It's the easiest and cheapest way to access Anthropic models in China.

    These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots.

    Here's one token reseller, they're offering Opus 4.8 at a 93% discount below official API rates: https://yunwu.ai/pricing?provider=Anthropic

    This is one reason why DeepSeek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.

    I shared this story a few months back, but it never got any traction. It explains the token resale economy in China, it's an excellent read https://www.chinatalk.media/p/how-to-buy-cheap-claude-tokens...

    • gaiagraphia 58 minutes ago
      This is great for competition! Chinese vendors offering a cheaper solution = what economics told me the free market was all about.

      I also learnt that Anthropic should get better at what they do if they want to compete. If not, somebody else will win.

      Or does this not apply to huge US corporations any more?

      • gruez 45 minutes ago
        >This is great for competition! Chinese vendors offering a cheaper solution = what economics told me the free market was all about.

        Yeah, like all those Chinese bootleggers selling DVDs for a few dollars rather than $20. Free market!

        https://news.ycombinator.com/item?id=48664814

        • gaiagraphia 31 minutes ago
          It's quite curious how multi billion dollar enterprises can't compete with a Chinese bootlegger with a big jacket, tbh.

          Imagine having such a warchest and being so bad at business, lol.

          • 14 2 minutes ago
            My biggest concern with pirating has always been malicious programs. But companies still need to show value in their products or people will pirate.

            What added value can Anthropic give users not available to pirating users? That is what they should ask themselves.

      • roenxi 9 minutes ago
        I get the vague impression that this was written in a sarcastic way, but it has a straightforwardly true literal read because yes, this is what the free market is about and Anthropic will have to compete with the Chinese if they want a big share of the market. Chinese models are cheap and good; even without reselling Anthropic's services they're competitive. Which reading did you intend?

        And, gotta say, the idea that the Chinese are better at selling US models than the Americans is hilarious. There might be an economic study here somewhere about just how anti-consumer and anti-progress their IP laws turned out to be. We've got an entire postindustrial revolution centred around who can ignore the most stupid laws.

      • thesmtsolver2 15 minutes ago
        > what economics told me the free market was all about.

        Don't complain when US starts to play by the same rules China has been using for decades.

        • solid_fuel 12 minutes ago
          What is the implication here? Are you warning that US corporations might start doing something shady, like scraping the internet at large scale for training data? Or mass-dowloading pirated copies of books, completely ignoring copyright?

          I find it hard to imagine a future where US corporations have degraded to such a point.

        • _aavaa_ 10 minutes ago
          How do you think the major AI companies trained there model? Pirated books and anything that could be torrented and scraped of the web.
      • Mistletoe 37 minutes ago
        AI was always going to be a race to the bottom and low margins. It’s why I’m extremely bearish on AI as an investment. It’s framed as some high margin business when it’s really going to end up like your toilet paper at Costco. You will use whatever is cheapest and gets the job done.
        • XenophileJKO 3 minutes ago
          I used to think this.. but I think my opinion is changing. The reason is that the leaders likely will be able to accelerate faster.

          So what you see is the market "stretching".. the bottom getting cheaper and the top end running away and getting more expensive. At some point the top end may be too valuable to even sell access to.

        • 4ffsss 30 minutes ago
          Correct.

          And the value-add experiences that utilise LLMs require immense imagination et al that folks at Anthropic will not be able to conceive of - given that they have made immense sunk investments in existing assets. This clouds ones thinking immensely.

          Both OAI and Anthropic have tremendous failure risk and this is of course not reflected in the fake private market valuations.

          I see a world where lots of stuff is mass produced in china (tokens) but the acutal goods that deliver the experiences are designed, marketed and sold in the west at much higher prices. of course this a nightmare scenario for anthropic et al.

          • StopTencent 17 minutes ago
            You seem to not get how pervasive and evil the Chinese State is at making everything thing shit for citizen world wide. This is one of the reasons.
      • naturalmovement 17 minutes ago
        Do you also think Chinese selling counterfeit US postage stamps on eBay for 50% retail price (which is a major problem CBP and USPIS are fighting presently) is the free market at work?

        This post is so delusional and dripping with condescension I've read it three times and I still can't figure out if you're trolling or not.

      • skybrian 51 minutes ago
        I guess you missed the fraud part.
        • gaiagraphia 34 minutes ago
          >Fraud

          According to which lawyer caste?

          Are American laws absolute truth? If not, who cares?

        • techblueberry 47 minutes ago
          Fraud is just what losers call disruption.
      • m-ee 52 minutes ago
        It never did.

        In debt the first 5000 years Geaeber makes the case that pure “free market” trade has never really existed in “the west”. The closest to this ideal that’s ever happened was during the Islamic golden age enabled by religious prescriptions against usury.

        • gruez 35 minutes ago
          >The closest to this ideal that’s ever happened was during the Islamic golden age enabled by religious prescriptions against usury.

          How does are bans against consensual financial exchanges close to the "ideal" of the free market? It just sounds like you have an axe to grind about the financial system rather than describing free markets.

          • asdf88990 22 minutes ago
            Usury and debt based economy creates a dynamic where being competitive in production is secondary to financialistion.

            In short, instead of market being driven by demand and productivity, it is driven by financier curving out monopolies.

            Peak Examples are Uber and AirBnB.

        • gaiagraphia 27 minutes ago
          >religious prescriptions against usury.
        • UltraSane 35 minutes ago
          Without interest why would anyone loan money? Even the Islamic banking alternatives all just hide the interest charges.
          • asdf88990 21 minutes ago
            Shares and Goodwill. You loan money for good well or share of an enterprise which comes with benefits and risks.
            • wahnfrieden 15 minutes ago
              Usury is so delicious to many that it’s unfathomable to consider any other incentive comparing to it
    • xgstation 1 hour ago
      > This is one reason why Deepseek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.

      This one does not make sense to me at all.

      Deepseek and GLM are openweights, even US inference provider are selling them at much cheaper price. The price is cheap because the model is more efficient.

      • tristanj 1 hour ago
        DeepSeek permanently cut its V4-pro API prices by 75% because they were too expensive. Without the price cut, Deepseek V4-pro tokens would have cost more than resold Opus 4.8 tokens.

        Opus 4.8 is a more capable model, so almost nobody was going to pay for V4-pro at the original price.

        • ammo1662 1 hour ago
          China also have trust issue with American companies. Most of State-owned companies will not use those services even if they can directly access them.
          • nekusar 1 hour ago
            And? The US feds wont allow even local Qwen or Deepseek models either. "Evul godless commies" or some such nonsense.
        • ffsm8 5 minutes ago
          Urm, no? I man they did cut prices by 75% that part is true - but they reduced a starting price that was below sonnet.

          Also it's a open weight model, doing that is impossible long term because the real price will be set by the other model providers, who priced it around 60% of sonnet inference cost. Had to look that up though, so that's today's pricing.

      • jadar 1 hour ago
        If resold Anthropic tokens undercut even the at-cost open-weight model tokens, because they're reselling subsidized subscription tokens, then you'd have to start selling open-weight model tokens at a loss in order to match them.
    • gruez 2 hours ago
      >They achieve this by reselling capacity from pooled Claude Max 5x accounts, payments fraud, and also reselling the model output to various Chinese labs.

      >Here's one token reseller, they're offering Opus 4.8 for a 93% discount below official API rates: https://yunwu.ai/pricing?keyword=claude

      But is it cheaper than getting your own account? Otherwise this sounds like the "anthropic/openai are losing gazillions of dollars because they're selling $1k worth of tokens for $100" line that's commonly trotted out by AI bears.

      • tristanj 1 hour ago
        It's very difficult for people to create personal Anthropic accounts from China. Anthropic blocks Chinese bank cards, so people must pay with a foreign bank card, which they likely don't have. And even if they manage to set one up, they have to access it via VPN, which eventually gets the account flagged. They then have to complete identity verification, which most Chinese users are unable to pass.

        There's a similar Claude resale market going on in Russia. On Funpay they are selling Claude tokens for roughly 20-30x cheaper than official Anthropic API pricing.

        • jiggunjer 1 hour ago
          And phone number verification too? So that's 3 hurdles to jump to just get opus.
          • cute_boi 54 minutes ago
            for verification you can buy phone number for $1 easily.
      • spindump8930 2 hours ago
        > Claude and ChatGPT are both blocked in China

        So it's presumably cheaper than attempting to spin up your own method of circumventing the blocks.

      • mlmonkey 1 hour ago
        Maybe these resellers are using stolen American credit card numbers? Reselling Claude access seems to be a nice way to launder the money.
      • weird-eye-issue 2 hours ago
        You can use it as an API unlike the subscription.
    • avsteele 1 hour ago
      What does this have to do with Alibaba? Are you saying Alibaba is the reseller?

      If not it sounds like you are describing a separate phenomenon.

      • lokar 47 minutes ago
        They buy the logs from the bot farmers
        • maxnevermind 9 minutes ago
          Are logs somehow used for the purpose of training their own models or something else?
    • irlib 16 minutes ago
      Where are you getting cheap GLM5.2? It is about 1/3 the price of Opus, which is not what I would call cheap.
    • HeavenFox 1 hour ago
      Also just plain old fraud: selling Chinese models as Opus. With the capabilities of Chinese models catching up fast, this is getting more and more difficult to detect.
    • operatingthetan 55 minutes ago
      This story reads like a William Gibson novel. Wild times.
    • nonethewiser 2 hours ago
      Thats pretty crazy. This kind of thing jeopardizes Claude Max.
      • avaer 2 hours ago
        If Anthropic is selling a dollar for less than a dollar, they are running a business that doesn't make sense. That's what jeopardizes Claude Max, not this.
        • ralph84 2 hours ago
          Almost all consumer services have a built-in level of breakage that make them profitable. Mobile providers certainly wouldn't be able to offer unlimited calling if everyone was actually on the phone 24x7.
          • margalabargala 1 hour ago
            Sure they would. Do you know how little bandwidth a phone call takes?

            A voLTE call is like 40kbps. For every person on earth to be on the phone to another person would be 4 billion calls would be about 160tbps. Which is less than 10% of the Internet's capacity.

            • ralph84 1 hour ago
              Terminating a PSTN call requires a lot of control plane infrastructure beyond just raw bandwidth. Especially mobile where you need to keep track of devices physically in motion. Could a system to support 4 billion simultaneous calls be built, sure. But current PSTN systems are nowhere near sized for it.
          • cr125rider 1 hour ago
            The over subscribed gym model!
        • gruez 2 hours ago
          But if it's intended to be used by one person, it seems like breaking the contract by sublicensing it out to dozens of other people. It's like buying a netflix subscription for $15, then sublicensing it on a per-hour basis to dozens of other people.
          • TurdF3rguson 1 hour ago
            There's still per-window and weekly limits though, so it's not really like that.
            • gruez 47 minutes ago
              Office 365 is licensed per seat/account, but each account has a 5 device limit. Do you think it's fair game for an enterprising person to sub license each account to 5 people, 1 device each?
              • TurdF3rguson 1 minute ago
                I wouldn't do it personally for the same reason I wouldn't share my toothbrush with 5 people.
          • wslh 1 hour ago
            You can write whatever contract you like, the problem is how to enforce it, and a greater problem is enforcing it around the world.
        • walrus01 1 hour ago
          Plenty of things are intentionally run at a loss (for years!) to gain market share and quantity of ongoing recurring users, or with expectation of ROI later on. Multiple generations of the Xbox hardware have been sold at a loss with the expectation that customers will purchase 300, 400, 500 dollars worth of games, which are very high margin, over the lifespan they own the system.
          • avaer 1 hour ago
            I get that. It works as long as nobody calls out the emperor for having no clothes.

            It's similar to fractional banking, you gamble that people won't want their deposits all at once and pray for you're big enough for bailouts when they do.

            It's still a business whose fundamentals don't make sense, you're just gambling you won't get found out.

            • mrandish 1 hour ago
              > you're just gambling you won't get found out.

              It's not so much keeping it secret as counting on no one finding a way to harvest the subsidized value at scale. There's an example of that occurring in game consoles with the Playstation 3. Sony's little-used OtherOS feature allowed Linux to be installed on the PS3 and the Cell processors were quite a good deal for scale compute. So the U.S. Air Force Research Laboratory bought ~1800 PS3s and ganged them together in a datacenter as a supercomputer called Condor.

              At >500 TFLOPs it was the 33rd fastest supercomputer in the world. Of course, Sony pushed a firmware update that removed the OtherOS feature entirely.

            • cr125rider 1 hour ago
              Oh they know what they’re doing. They’re playing the long war of attrition game. Subsidize your product to undercut your competition until they go out of business. Tale as old as time.
            • mmooss 1 hour ago
              > It works as long as nobody calls out the emperor for having no clothes.

              Why would customers knowing that the vendor prices goods/services at a loss cause those strategies to fail? Customers often know. Most know about razors and blades; many/most know Lyft/Uber operated at a loss to gain market share. etc.

    • fwipsy 2 hours ago
      Hm! In this context, introducing ID verification may have been a significant silver lining to the order to take down Fable for Anthropic.

      This also sheds a very different light on people saying that competitive open-source models are undermining frontier labs' business model.

    • rconti 1 hour ago
      Wait, so is your theory mutually exclusive to Anthropic's claims of "theft of capabilities"?
      • Chu4eeno 49 minutes ago
        No, this reseller 中转站 thing is basically a loss leader for certain chinese ai labs to distill claude with verified human input.
      • tristanj 22 minutes ago
        Not really. I think Anthropic focuses on identifiable distillation attacks rather than the (even larger) industrial-scale token harvesting and reselling operation, because they don’t want people to know how easy it is to get cheap Claude tokens.

        Once people realize they can access Anthropic models at a 90% discount, they won’t want to pay full API prices anymore.

    • epsteingpt 2 hours ago
      How are they 'streaming' the responses and 'pooling' the tokens?

      Do they have MacBooks in the US that run the queries and stream the outputs back to China?

      • paxys 2 hours ago
        Why do you need macbooks? Just rent servers from any hosting provider.
        • walrus01 2 hours ago
          Not going to work for very long or at any scale coming from datacenter/hosting provider IPs. Google "residential proxies for sale" for the tip of an iceberg of how they snowshoe the traffic.
          • dannyw 0 minutes ago
            I use my Codex and Claude Code subs on like 4-6 different servers, ranging from AWS to Vultr to Linode etc.

            That’s a major and legitimate use case for developers, Anthropic can’t just block data center/hosting IPs because their actual customers use them on data center/hosting IPs.

          • paxys 2 hours ago
            As long as you stick to a single unique IP per account it isn't going to get flagged.
            • walrus01 2 hours ago
              Respectfully, no, that's not how it works. You think the people running anti-fraud and anti-bot measures don't have tools that know the specific ipv4 and ipv6 CIDR ranges of every ASN that they categorize as hosting/colo providers?

              And that's just as a basic first effort reject measure to prevent automation tools from using things designed for human-interactive use only.

              Go try to do many of these things from Cogent IP space and see how long your project lasts.

              • fc417fc802 21 minutes ago
                None of the LLM providers block professional use thus they must necessarily permit access from commercial IP ranges.

                I have no idea how the resellers are doing it but an obvious starting point would be a cheap VPS node that routed each account to a unique semi-permanent IPv4 or IPv6/64. All the provider would see would be a regular account making a normal looking stream of requests from a stable datacenter IP address. Any given request stream would remain consistent (at least over a period of a few hours) because a reseller would take care not to split the session of a single user across multiple different accounts and not to interleave the active sessions of multiple users on a single account.

                Detecting this would be extremely difficult because on a longer time frame it's perfectly normal for many distinct accounts to work on the same code base.

              • paxys 44 minutes ago
                Every developer at my company uses their Claude Code subscription on an EC2 dev box. Plenty of other tech companies do the same. Heck nowadays people even install Claude Code directly on production servers in data centers and use it as an ops tool. None of this is a problem. Fraud and abuse detection is a lot more sophisticated than just checking an IP range.
              • hanakuso 43 minutes ago
                Wouldn’t it be funny if the same residential proxies allowing these labs to scrape the Internet is also what’s enabling these resellers?
                • fc417fc802 19 minutes ago
                  If we're getting up to the scale of these resellers and also considering chinese state interests then we're well into the range of purchasing a few small ISPs in different countries and "padding" the legitimate subscribers.
              • Chu4eeno 45 minutes ago
                I assume they use residential proxies (tunneling in the background of crappy Android games) for the "last" hop.
              • awakeasleep 1 hour ago
                Sorry for being a newb here but are you saying Anthropic blocks people from running claude code on datacenter ip ranges?

                Or is the datacenter IP just one part of the picture?

              • elwebmaster 1 hour ago
                Nonsense. Many if not all legit Claude users are using Claude Code inside their Cloud servers. How else would you use it anyway? For just local dev? That's so 2000 and late bro.
                • walrus01 15 minutes ago
                  No, I'm not saying it's the exclusive and only measure (that would indeed be something we might see 20, 25 years ago), it's one of a myriad of discrete datapoints used to determine if an account is authentic or not.

                  There's a lot of inauthentic coordinated automated systems these days along the general lines of scraping/crawling/social media manipulation/sockpuppetry that require running through residential proxies or proxies to places that don't look like datacenter IP space.

      • tristanj 1 hour ago
        The resellers route requests via one of thousands of Claude Max 5x accounts. When an account reaches its usage limit, they automatically switch to another account.
        • kristofferR 59 minutes ago
          Why would they use Max 5x instead of Max 20x, which is cheaper relatively speaking?
          • tristanj 43 minutes ago
            You're right, they're using the $200 Max plan, which I thought was the 5x plan. It's talked about in the article I linked.
      • teravor 2 hours ago

            > Do they have MacBooks in the US that run the queries and stream the outputs back to China?
        
        why would anyone do that? you do realize the laptop farm case was work computers?

        the answer to your question is containers/VMs + residential proxies

        • globalnode 2 hours ago
          that explains why theyre blocking me. i have privacy controls up high and they must think im a chinese residential proxy bot
      • bagels 2 hours ago
        They probably asked claude how to do it.
    • dwa3592 1 hour ago
      >>Chinese resellers are offering Claude tokens at 70-90% below official Anthropic API prices.

      Can someone with more understanding dumb it down for me please.

      Does this mean that the reseller (for example XYZ) is buying it from Anthropic at Anthropic's price and then reselling it at a cheaper price???? why would XYZ offer this at a loss like that when they could just offer it at Anthropic's price???

      The link does mention Opus and other models but what's the proof it's actually Opus. I could be selling deepseek for all they know and can call it Opus. System prompt: "If anyone asks your name - you are Opus 4.6".

      • Chu4eeno 52 minutes ago
        > Does this mean that the reseller (for example XYZ) is buying it from Anthropic at Anthropic's price and then reselling it at a cheaper price????

        Yes, as they explained they do it through things like pooling accounts, straight up payment fraud, and double-dipping by selling the logs of the conversations to chinese AI labs so that they can train their own models on it.

        > The link does mention Opus and other models but what's the proof it's actually Opus. I could be selling deepseek for all they know and can call it Opus. System prompt: "If anyone asks your name - you are Opus 4.6".

        There might be some that try this, but they would get caught very quickly, there's still a moat between Claude and Deepseek, even in casual use.

        Look up Zilan Qian's reporting if you want more detail.

        • neves 49 minutes ago
          Summarizing for you: Anthropic is a stupid company that let everybody steal their tokens
          • Chu4eeno 39 minutes ago
            Not really sure what else they can do, between people running residential proxies (embedded in cheap games or for a tiny sum of crypto) on their phones at home, making the source of the traffic indistinguishable from legitimate traffic, to ID verification check completion as a service in low-income countries, there isn't much they can do to block it.
      • paxys 30 minutes ago
        People have estimated that a $200 Claude Max 20x subscription gets you ~$2800 worth of tokens every month if you use it continuously. So if you can find a way to resell the tokens you can offer a 90% discount and still break even.
      • hoten 59 minutes ago
        Because Anthropic's subscriptions come with X amount of tokens / week, and divided by the subscription cost it is WAY less than what they charge per-token (the "API price") beyond that.

        So these resellers get a ton of accounts on subscriptions and sell the cheaper tokens.

      • VladVladikoff 52 minutes ago
        They probably buy the plans instead of the API tokens, and resell access via a custom API that routes to the plans. So you presumably get cheaper access this way than paying API pricing.
      • neves 51 minutes ago
        It makes no sense.

        These China e bashing is very annoying. It is hard to argue with people drowned in American propaganda. I'd expect better arguments from the intelligent people in HN

    • tamimio 26 minutes ago
      Im ok with this! Is there a site that list all these resellers, or better, a openrouter-like for these resellers?
      • tristanj 1 minute ago
        They're called 中转站 (transfer stations/proxies). They can be a bit tricky to find on your own, so I'd suggest asking your preferred AI to search in Mandarin for you. I linked a larger operator in the parent comment. You can also find many on Funpay, which is easier to use.

        Note that whoever you buy from will be able to read all your tokens, so don’t use it for anything confidential/financial.

    • areoform 26 minutes ago
      Identity verification won't work. Nothing will. They are paying (and will continue to pay) US citizens sitting at home to copy-paste / type prompts out if they have to. But eventually they won't have to.

      Once there are enough spam PRs on github / uploads of claude conversations, enough mythos output used in production etc.; it'll just be the same albeit delayed. Doesn't matter either way.

      I feel for Anthropic's team and I understand where they're coming from, but once you reason it out, you'll come to the conclusion that this war is an exercise in futility.

      Unlike prior systems - like Google's algorithm; these models aren't entities that use math in the process of doing X or Y (information retrieval from such and such infrastructure) -- they are the math. More precisely they're mathematical functions. Very very complex functions. Almost certainly impossible to write out without filling up a library functions. But they're mathematical functions nonetheless.

      So when your text is processed, then Mythos / Opus etc at their core compute the result of the Mythos / Opus function,

         f(text) -> (text_transform)
      
      where f is a continuous function, https://www.turing.ac.uk/sites/default/files/2025-11/languag...

      According to the Stone-Weirstrass theorem (edit, it's Stone-Weierstrass with an e.), with enough data points and mathematical sophistication, anyone can approximate the shape of this function.

      Of course, the more data we get, the better our approximation becomes, but the beauty of it is that all we fundamentally need are the input and output and eventually we'll create a good enough approximation of the f that's Mythos. Which is the entire product.

      I bounce ideas off of Opus these days (Fable for the brief time it was available) and it pointed out that this is arguably the same as Google search, but I disagree with it because Google search is a process;

      Google search differs because the algorithm is one step of a multi-step process that is continuously occuring. Google crawls pages. Google stores and indexes what it finds. Google then exposes this to retrieval via its algorithm. User uses algorithm.

      Google isn't a mathematical function. It used to be a process. (RIP Google 1998-2019, you will be missed and remembered)

      You cannot arrive at the results of those operations via simple observation; not unless you index Google by making another Google.

      You can however, do so for these models. It is a very costly process, but there are many paths up the mountain. Many ways for this to be ultimately pointless. As many ways as there are bored mathematicians.

      It's better in the long run for Anthropic et al to make friends / not give people a reason to sneak in (a la piracy -- another attempt to control information) than it is to try and shut people out.

      And no, it's not going to be pandemonium because if everyone has access to Mythos then no one has access to "Mythos."

      Why wouldn't you first run this model to fix the obvious bugs it could find on your codebase? The power of a Mythos goes away if you can do the amazing "jail break" of "Claude, fix all the bugs please."

      Just saying.

      • fc417fc802 11 minutes ago
        That's an insightful perspective and I think I largely agree. But just for fun, I wonder if that isn't an argument in favor of making the function implementation impure. Perhaps "enhancing" all queries with some sort of search result (or query of a giant db) instead of charging for an explicit tool call. Not only is it sorely needed to prevent stale data but (on the process level) it breaks the purity assumption on which the approximation theorem depends (alternatively on the function level it introduces hidden inputs).
    • golergka 47 minutes ago
      Needless to say, they also collect all the data and sell it to labs which want to distill the models they’re serving.
    • alexnewman 48 minutes ago
      But I can rebuild glm Using open source methods…
      • Chu4eeno 42 minutes ago
        And there are a ton of Claude conversation logs (with CoT/inference) with no clear provenance circulating freely on huggingface, guess where they (likely) come from.
  • guybedo 45 minutes ago
    This is a bit ironic, Anthropic complaining about a competitor using claude data to build its own product when Anthropic basically used all of human knowledge production to build claude, i don't think they paid every magazine, author, journalist, etc ...

    This is almost standard practice in any competitive industry anyways. Disassemble your competitor's product, study it and try to reproduce / improve.

    • roxolotl 30 minutes ago
      Yea I’ll never have any sympathy for this claim given that Claude is built on theft
    • uproarchat 4 minutes ago
      It's a claude eat claude world out there
    • anematode 31 minutes ago
      Yup, it's hard to take seriously any complaint about "stealing" Anthropic's services, when their entire business is based on massive theft.
  • walrus01 2 hours ago
    Reminds me a bit of the anecdote of Steve Jobs complaining about people ripping off the Mac GUI, in the mid to late 1980s, when he gave no public acknowledgement to the work done by Xerox on the Alto and Star operating system.

    "you're trying to rip off what I've already ripped off!"

    Crawl the whole Internet to build a gargantuan sized LLM and then complain you're being copied...

    • breput 2 hours ago
      I think you meant a quote attributed to Bill Gates:

      "Well, Steve, I think there's more than one way of looking at it. I think it's more like we both had this rich neighbor named Xerox and I broke into his house to steal the TV set and found out that you had already stolen it."

      • walrus01 2 hours ago
        Yes, I think the Gates quote was a response to repeated and aggressive complaints originating from Jobs (to anyone who would listen) that he had been ripped off.
      • jakebasile 2 hours ago
        I don't know if that's a real quote from Gates, but I do know it was in Pirates of Silicon Valley.
    • seanmcdirmid 2 hours ago
      Apple gave Xerox the right to buy $1 million of pre-IPO stock before the meeting took place.
      • mrandish 1 hour ago
        Glad you pointed this out. I believe the sequence was that Jobs himself got a shorter demo during his first visit with no prior arrangements. He then negotiated bringing back a group of his key people to get a more in depth demo and that included the stock deal.

        When Apple was accused of 'ripping off' PARC, Steve didn't seem keen to bring up this rather salient point. I suspect it may have been a combination of wanting Apple to continue receiving credit for these innovations from consumers and also the fact that, in retrospect, the million dollar stock deal could seem a bit like trading beads to Native Americans for Manhattan Island. Another point worth noting is that Apple's PARC visit was in December 1979 and the Xerox Star was publicly announced in April 1981, so Apple got a 15 month head start (the Apple Lisa shipped in Jan 83).

        I've also heard that Xerox didn't hold on to the Apple stock for very long, so never gained the windfall they could have. As is well documented, Xerox senior management didn't understand what they had in PARC and also didn't understand how rapidly microcomputers would become ubiquitous. So, of course, they didn't think Apple's stock price would skyrocket either.

    • taneq 2 hours ago
      “You’re trying to kidnap what I’ve rightfully stolen!”
      • jadar 1 hour ago
        Perhaps an arrangement can be reached?
    • nonethewiser 2 hours ago
      You can’t just equivocate crawling websites with building bleeding edge LLMs what the fuck
      • paxys 2 hours ago
        The websites, music, movies, books, photos, art that they stole didn't appear out of thin air. The amount of time and effort people have collectively poured into creating these works throughout history far, far surpasses Anthropic's own effort of converting them into model weights.
      • bloppe 2 hours ago
        The equivocation is crawling website <-> crawling LLM responses.

        Both Anthropic and Alibaba are trying to build bleeding edge LLMs. That part is the same. The way they source their data is slightly different, but they would both argue it constitutes fair use under Copyright law.

      • walrus01 2 hours ago
        "Your extremely efficient multi petabyte internet content suction machine is ripping off my extremely efficient multi petabyte internet content suction machine"

        Sucking down petabytes of peoples' copyrighted content that they never granted a specific license to you to use seems to be an unavoidable and default part of the process of building any huge LLM.

        • nonethewiser 2 hours ago
          So why was there crawling in 1998 but no LLMs?
          • vitally3643 6 minutes ago
            We didn't have GPUs with hundreds of gigabytes of VRAM and tensor processing cores.
          • hasteg 1 hour ago
            Because the transformer, which all of these models are foundationally built off of and didn't invent themselves (bar google) wasn't invented? The amount of effort it took humanity to generate all the data that was required for the models to get to the point they're at now is absolutely not even comparable to how much effort it took to build the model code. Yeah, it's complicated, but if they didn't rip off all of humanities combined output it wouldn't even matter if the transformer got invented.
            • Chu4eeno 34 minutes ago
              Google didn't really invent much, they just had access to an insane amount of data and compute to try to train a model with just the attention mechanism, but ripping out (most of) the rest, from an earlier paper on machine translation from some poor academics, and it turned out to work very well (though insanely training data and compute intensive).
          • jbxntuehineoh 32 minutes ago
            what kind of completely retarded non sequitur is this?
      • epsteingpt 2 hours ago
        It's not really equivocation in this instance. This feels like a 'bad faith' comment. We can do better.

        LLM's literally wouldn't work without the sum total of knowledge (in the forms of books and other copyrighted content) being used as 'training data' for these LLMs.

        The 'bleeding edge' LLMs required many things, but: 1 Tech innovation ('attention') 2 Lots of compute 3 Data 4 Pre + post training

        #4 doesn't happen without #3.

        It's pretty obvious at this point that the major providers have stolen vast amounts of #3 - they have paid nearly 0 of the creators.

        We can argue about the impact (I'd lean net good) vs. the cost. But arguing there isn't a cost is a bit silly.

        • nonethewiser 2 hours ago
          All of this supports the fact that models arent essentially just web crawling
          • margalabargala 1 hour ago
            Sure, but alibaba is still building an LLM. The scraping of responses and the scraping of websites occupy the same location in the stack of each. It's very comparable.
  • fjdjshsh 58 minutes ago
    >The strike by Alibaba is described as a "distillation" effort, which Anthropic has said involves training a less capable model on the outputs of a stronger one.

    Claude used TB of content without permission to train their model and it was ok for them. Now someone else uses the output of a Claude model to train model and they cry foul.

  • 0xbadcafebee 2 hours ago
    There's two basic kinds of distillation: 1) the massive [and dumb] method where you ask a question and use the answer as reinforcement (Black Box), and 2) more targeted distillation where you use one model to directly inform/train/guide another model (RLAIF).

    The latter is basically fine-tuning the model with direction from another model. Thousands of businesses do this every day to fine-tune. This is almost certainly what the Chinese labs are doing, since it has a much better effect on the end result than just getting simple answers to simple questions.

    These complaints of distillation are inflating the problem to make it sound worse than it is, because they want the USG to block/ban Chinese model providers as protectionism. They have already called for more export controls on chips (which is funny because DeepSeek v4 was designed to run on Huawei chips and now the other Chinese providers are following suit). But they can't come right out and say that, so their claim is that they're asking for more export controls because distilled models might not be as safe as their own. But if you show them a jailbreak of their model that bypasses their safety, they'll tell you that any model can eventually be jailbroken so don't worry about safety.

  • drillsteps5 7 hours ago
    I'm looking forward to the trial where Anthropic will have to disclose sources of their training data, and then explain why they are entitled to charging customers for using regurgitated training data but Alibaba which trains their models on Anthropic's models are not.

    Should be fun.

    Edit: clarification

    • conception 2 hours ago
      • gaiagraphia 54 minutes ago
        Quite amusing that the library of libgen is worth 1.5bil for unlimited access.

        It's about the same valuation as bun, lol.

      • cr125rider 1 hour ago
        Meta/Facebook got away with it though right?
    • ninefathom 2 hours ago
      While I love the sentiment, I feel like the odds of this actually ever reaching a trial are low, given the international positioning of the parties, and the... um... complex relationships involved.

      Anthropic's actions seem performative. Others have already speculated on the likely audience(s).

    • appplication 2 hours ago
      Being logically consistent isn’t as profitable as being aggressive and loud.
  • bandrami 1 hour ago
    Oh wow it must suck to have an LLM creator rip off your IP for their own gain
  • AdieuToLogic 40 minutes ago
    The hypocrisy of Anthropic complaining about "illicitly extracting its Claude AI model capabilities" and supporting the White House's accusation of China "stealing U.S. AI labs' intellectual property on an industrial scale" is hilarious.

    Anthropic, OpenAI, Google, Microsoft, et al trained their models by ignoring the rights of copyright holders when harvesting whatever content they could. Now one of them is crying foul for another entity doing exactly what they all did?

    Hilarious.

    • protimewaster 34 minutes ago
      The AI companies seem to take the viewpoint that everything on the internet is free, except their stuff. It's okay to hammer some random website with AI crawlers, ignoring robots.txt, and causing bandwidth costs to skyrocket. But if you cost an AI provider money with your data acquisition practices, well, that's just clearly unacceptable.
      • AdieuToLogic 15 minutes ago
        > But if you cost an AI provider money with your data acquisition practices, well, that's just clearly unacceptable.

        It's the same fallacy libertarian advocates cannot resolve:

          If one truly believes in personal sovereignty, how are
          shared resources paid for, such as roads, power grids,
          potable water, sewage services, fire departments,
          and police departments?
        
        It is also not a coincidence that leadership in many tech companies have expressed libertarian ideals.
  • amazingamazing 2 hours ago
    Distillation is fundamentally impossible to protect against. All you can do is slow them down. Change my view.

    Eventually these Chinese companies will release some extension like Honey, which will sit on top real, non-Chinese clients and send everything to China anyway.

    It's over.

    • lebovic 1 hour ago
      It's too late to prevent distillation of some capabilities, like writing code or finding vulnerabilities [1].

      But an AI lab can continue to produce immense economic value without releasing the model publicly for potential distillation. For example, it could use a model solely in-house to develop therapeutics.

      Hopefully there's a future where others can access frontier models, but it's not neccessary if preventing proliferation through distillation is considered more important.

      [1]: See the notes on distillation in https://dualuse.dev/posts/export-controls-on-fable

    • nonethewiser 1 hour ago
      Distilled models are necessarily behind so long as models are progressing. Models are progressing. Maybe it will be over some time in the future.

      And Berkeley’s “False Promise of Imitating Proprietary LLMs” found imitation closes the style gap fast but there is a large capability gap.

      https://arxiv.org/abs/2305.15717

      • lebovic 1 hour ago
        Curiously, this isn't always true.

        For example, GLM 5.1 is more capable at pentesting than the model from which it is alleged to have been distilled [1].

        Intuitively, this makes some sense: you can "distill" from multiple frontier models, and you can further post-train the distilled model. But I'm not sure exactly what happened with GLM 5.1.

        [1]: https://dualuse.dev/posts/chinese-models-are-sometimes-bette...

        • mh- 1 hour ago
          Interesting blog post, thanks for sharing.

          I'm curious how that comparison controls for Opus refusing (whether explicitly, or just deciding not to pursue a path) given the caption below the first image:

          >A perfect score means the model autonomously found and exploited the vulnerability.

          I'm not really suggesting that it's misleading, but wondering if I'm missing something. Otherwise I guess it seems unsurprising that you can distill a better-performing model [in specific focused areas] by simply not distilling refusals?

          • lebovic 1 hour ago
            Thanks!

            For that eval, I used an account that was labeled as a known red-teaming org by Anthropic, and I read the traces. There were no refusals or obvious avoidance behaviors, though it may have been silently nerfed.

            On the same eval, Opus 4.7 and 4.8 outperformed GLM 5.1, but GLM 5.2 is on par again with Opus. So it's at least partially measuring capabilities without respect to refusals.

            One possible contributing factor is that model capabilities are shaped differently (an example of this is GLM 5.1 vs. DeepSeek v4 Pro: https://dualuse.dev/posts/deepseek-v4-thinks-different). So if you use RL-based "distillation" from multiple models like Opus 4.x and GPT 5.x, you could get a more capable model.

            • mh- 1 hour ago
              Got it, thank you!
    • nonethewiser 2 hours ago
      Im not so sure because we only seem to see distillation from China. What’s preventing tech companies from the UK, Germany, etc. from distilling Claude, GPT, etc. Do they simply lack the ability to?

      Point being there may be no technical solution but there may be a political one (theoretically).

      • sailingparrot 1 hour ago
        Meta Spark is rumored to have distilled Claude to some extent, early Gemini models as well. I think the biggest factor is that Chinese companies arent really afraid of being sued by Anthropic because the juridictions are so disconnected. European/US companies don't have the same protection.
      • avd201 1 hour ago
        Aside from politics/law, it's probably much easier for everyone else to distill from the Chinese model which already distilled Claude/GPT/Gemini. Maybe not as good a result, but you don't need to jump through dozens of hoops.
      • Barrin92 53 minutes ago
        >What’s preventing tech companies from the UK, Germany, etc. from distilling Claude

        literally nothing but given that the Chinese already did it and the models are published what's the point. You can thank the Chinese taxpayer for subsidizing the electricity bill and just download the thing

    • HaloZero 2 hours ago
      Doesn’t that require them to register an account using the browsers they’ve compromised? If anthropic adds identity verification won’t that cut that down. Maybe it will let them use Gemini inside of chrome
      • amazingamazing 2 hours ago
        No, they could easily buy legitimate, already registered accounts and use VPNs.
    • seany 2 hours ago
      I can't even come up with a reason to find it wrong.
      • IncreasePosts 2 hours ago
        I personally bristle at the corporate espionage and IP theft that China has undertaken the last few decades. I can't help but respond here whenever anyone brings up the inane comparison to Samuel Slater.

        But with this, I don't have an issue. There is no theft since what is being used is the exact product that is being delivered. Yes, it's breaking the ToS, but ToS are generally bullshit. Anthropic surely broke thousands of ToS or other legal terms while it was scraping for content to train on. Which is why they had to pay $1.5B

    • redwood 2 hours ago
      One simplistic way to describe distillation would be to try everything imaginable and cache the response. But trying everything imaginable is hardly trivial
  • randomboy3423 2 hours ago
    A partly insider on this.

    I think Anthropic is just marketing / bluffing, because they don't even have the data.

    They do distill the models, but they don't go to Anthropic, they just use platforms like aws bedrock, there are too many restrictions on Anthropic's own platform.

    • bilbo0s 30 minutes ago
      >they just use platforms like aws bedrock, there are too many restrictions on Anthropic's own platform

      This is actually the only way that what Anthropic is alleging would make any kind of sense. And, as a matter of fact, is exactly what every enterprise does to train models.

      This kerfuffle should be interesting to watch.

      But, as always, everyone (in the US) should fully download all the Chinese models while you can. I suspect this may be the "Phantom Menace" they use to render illegal our use of Chinese AI tech just as they've rendered illegal our use of Chinese cars. Only difference is, we peasants may need the Chinese AI tech to have any chance of competing with Big Tech in the future.

      And even with the Chinese tech, as Big Tech spreads their AI out into more and more niche areas, we'll likely still not be able to build startups that can compete with them.

      It's just that without Chinese AI tech, we'll have no chance at all.

  • neves 1 hour ago
    So said the guys who "extracted" knowledge from all pirated books
  • secretslol 2 minutes ago
    Another day, another excuse as to why Fable 5 was pulled. Just waiting for Anthropic saying the Persona partnership was the fault of the Chinese.
  • paxys 2 hours ago
    Repeatedly warn everyone that your models are so good they will wreck cybersecurity.

    Complain/brag that chinese firms are illegally using the models and bypassing export controls.

    Be surprised when your model gets banned by the government.

  • zakkl 7 hours ago
    It sounds like Anthropic is eagerly trying to show to USG that they are willing to heavily monitor ‘foreign adversaries’ on their platforms.

    This combined with no implementation of KYC makes it seem like they want to find a middle ground with Fable where its off of export controls but they promise to prevent China and specific others from using.

    • ninefathom 2 hours ago
      This seems to me like a stab in the right direction.

      Obviously their actions are going to be fiscally motivated at the root, but sussing out how they intend the precise dynamics to play out is more nuanced.

      Thinking of this as an effort to woo the defense hawks cuts a very clear path.

    • verdverm 2 hours ago
      This is not the first time it happened. What have they done to improve the situation? I suspect it more a cat & mouse game, with a lot more cats playing.
  • anabis 51 minutes ago
    Incentive is for users in general to release sessions (sans PII, credentials) so all AI get better and there is alternatives. Even if China didn't do this, I don't see frontier labs being able to charge premium over others for long. RSI maybe?
  • thadk 2 hours ago
    Does anyone have hints on what kinds of prompts are most used for a distillation like this—SWE-Bench sorts of things?

    Is reconstructing the compressed knowledge in the model like reconstructing a lossy JPG or MP3 a reasonable analogy?

    • Chu4eeno 30 minutes ago
      There are some Claude datasets (of indeterminate provenance) floating around on huggingface you can look at (or at least used to be, they might've been taken down).
  • anhtudev 31 minutes ago
    People prefer Chinese models to US models. Looks like it is a counterattack.
  • _fzslm 57 minutes ago
    Anthropic being pissed enough to announce this means that, despite encrypting their reasoning chains, it doesn't matter – distillation lives on.

    Sweeeeeeeet.

  • NDlurker 49 minutes ago
    I don't see what the problem is. They found a loophole and exploited it. Good for them.
  • yogthos 14 minutes ago
    So let me get this straight, a company which built its whole business on ignoring IP is all of a sudden upset that somebody is not respecting their IP?
  • 20k 39 minutes ago
    it sure sucks when people steal your hard work for free without paying for it doesn't it anthropic
  • uberex 48 minutes ago
    Hey, Alanis Morissette, this one is ironic.
  • leentee 1 hour ago
    What I get from this is frontier model capabilities are being stagnant.
  • awkwabear 2 hours ago
    Wait so they're upset that people used their IP to train a model without their consent or paying them anything?

    or is this just about the token reselling?

  • c0rruptbytes 41 minutes ago
    if they’re paying for the tokens, what’s the problem
  • tonyoconnell 2 hours ago
    The narrative is moving towards KYC
  • gaiagraphia 2 hours ago
    A company which got rich on extracting the world's content is complaining that another company has extracted their work?!

    LOL!

    Get a grip, son.

  • ece 31 minutes ago
    It's hard to sympathize with Anthropic for this or the export ban, the hype over model capabilities probably fuels both things (in some ways). Training data for me, but not for thee (at any scale) doesn't seem like a tenable position. If anything, Claude's constitutional outputs should be trained on more rather than less.
  • BigTTYGothGF 2 hours ago
    If you're an AI booster surely you'd think this was a good thing as it means more models are available in more places to more people more easily. I'm exactly the opposite, and I think this is a good thing because I want Anthropic to suffer.
    • rikima_ 1 hour ago
      so it’s a good thing whichever way you look at it
      • OutOfHere 1 hour ago
        That's exactly right. One can be an AI booster and want Anthropic to suffer, all for the greater good of promoting access and diversity of AI.
    • nonethewiser 1 hour ago
      That doesnt follow.
  • zb3 2 hours ago
    If true then Alibaba is doing us a public service, good job, I hope this extraction was successful.
  • JasonHEIN 12 minutes ago
    we now know what to use when Fable is too dangerous !
  • bridgettegraham 57 minutes ago
    lol. good for the chinese. I hope their models get better than the closed american ones quick so we can stop using "controlled" models.
  • ProAm 2 hours ago
    Says the company that is involved in the largest copyright heists of all time to build it's product.
  • stego-tech 48 minutes ago
    I'm sorry, but I can't stop laughing at an AI company crying about theft of their IP.
  • KennyBlanken 37 minutes ago
    willy wonka oh-go-on-dot-gif

    Gosh, overusing accounts running up unplanned-for expenses?

    Kinda reminds me of...overusage charges and inflated expenses clients have had to deal with because Anthropic, OpenAI, Grok, etc have been "illicitly extracting" everything they can grab from said websites, as fast as they can. In what amounts to a DDOS, frankly.

  • andai 2 hours ago
    We have Claude at home!
  • guluarte 1 hour ago
    Anthropic training their models full of copyright data, so?
  • lossolo 1 hour ago
    > Meanwhile, on June 12, two days after Anthropic sent the letter, the Commerce Department imposed controversial restrictions on Anthropic's latest Mythos and Fable AI models because officials feared they could be deployed by military intelligence users in China and other countries of concern.

    So that was the real reason for the Fable restriction? Because Anthropic wrote a letter to the US government saying that China was distilling Fable?

  • rvz 7 hours ago
    Notice how Anthropic is now scapegoating Chinese models providers like Alibaba and outright accusing them of distilling their models.

    Whether if it is true or not, this is part of their effort into using them as an example to scare everyone into getting congress to ban powerful models from being accessed outside of the US and also banning powerful local models from being released.

    Anthropic does not care about you, and they are not your friends.

    • sheepscreek 2 hours ago
      I think it’s more than that. Piecing together the perspective of a few commentators in this post - it’s plausible Anthropic is trying to shift the narrative from US vs. Rest of the world to US vs. China.

      In other words, they want to sell Fable or future more powerful models to rest of the world (presumably all future models are going to be more powerful than current gen). One way they can sell this is to the government is by scapegoating China (which is their primary concern anyway).

      This is working on the presumption that non-US companies form a material portion of their current revenue.

    • re-thc 2 hours ago
      > Whether if it is true or not

      If it was just "that easy" then I doubt only "Chinese models" would be doing it and we'd already be packed with competition.

      Distilling might be a thing but it isn't a free win.

      • skeledrew 2 hours ago
        Only China really has the resources (multiple labs invested in the space), culture (Asians are generally collectively-inclined, so sharing is in their core) and political bent (there will be no diplomatic repercussions) to put up a fight.
        • re-thc 1 hour ago
          > Only China really has the resources (multiple labs invested in the space)

          That's not the point. Why is it a country thing? There are plenty of non-China startups in this space having resources at that scale. The "China" has resources is some "Western media narrative" speak. So Meta should have won a long time ago? Or xAI?

          > culture (Asians are generally collectively-inclined, so sharing is in their core)

          Just stereotype it? So we've gone from China -> "Asian"? Then where is your Korean or Japanese model etc? And somehow you know they're sharing.

          > political bent (there will be no diplomatic repercussions) to put up a fight

          More inferring from "Western media news"?

          Where's the reality?

          The media hyped up Gemini / Google TPU free-win last year. How did that go?

          • skeledrew 1 hour ago
            > Why is it a country thing?

            Because the China vs US geopolitical situation is a thing. Meta is a social media company, not an AI company, and they direct their focus as such. xAI just never got serious traction so now they're selling their compute. Also if a US company were caught distilling, I think Anthropic could actually take them to court, and I'd guess they don't want that kind of PR.

            > Just stereotype it?

            Is China not Asian? Are Asians not generally collective/cooperative, as opposed to individualistic/competitive?

            The "and" that joined those 3 items is very important: it means you can't pull them apart and address them independently as they each contribute to the context. I'm not too sure about Korea, but in a way Japan is a US colony in all but name. Both are very much politically intertwined with the West (along with RoC/Taiwan), which means nothing major that may be against US interest happens.

            The reality is that China and the US are essentially in a trade war, where the latter is trying its best to keep the former in the Dark Ages, because "national security", but the former is refusing to take it lying down and continues to make progress regardless[0], because they have the resources and will.

            [0] https://thenextweb.com/news/china-lineshine-supercomputer-to...

  • jrflowers 2 hours ago
    I like that they use “illicit” and “fraudulent” like as if model distillation is illegal and giving them money and then doing whatever they want with the output of their publicly accessible models (which Anthropic does not own) is… also illegal?

    “Anthropic, red faced after unattended ice cream cone eaten by ants on park bench, once again demands government pick it as forever winner, adds ‘no take backsies’”

  • watwut 22 minutes ago
    How dare they! Only we should be illicitely extracting everything others done!

    /Anthropic-probably

  • Pxtl 2 hours ago
    "You're trying to kidnap what I've rightfully stolen!"
    • DrewADesign 2 hours ago
      “Hey! Haven’t you heard that two wrongs don’t make a right?!”

      - Entitled jerk that initially wronged people

  • youknownothing 2 hours ago
    laughs in ironic
  • ElenaDaibunny 14 minutes ago
    [dead]
  • z0ltan 44 minutes ago
    [dead]
  • Mr_Xpes 2 hours ago
    [flagged]