--- title: Our position on open-weights models | daily.dev description: Anthropic CEO Dario Amodei clarifies that Anthropic has never advocated for a ban on open-weights AI models, pushing back against accusations amid US policy... canonical: https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Our position on open-weights models | daily.dev og:description: Anthropic CEO Dario Amodei clarifies that Anthropic has never advocated for a ban on open-weights AI models, pushing back against accusations amid US policy... og:url: https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna og:image: https://api.daily.dev/og/posts/F8WSbyxna.png og:image:alt: Our position on open-weights models og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Our position on open-weights models **[Hacker News](https://daily.dev/sources/hn)** · 8 min read · 1 upvotes · 1 comments ## Summary Anthropic CEO Dario Amodei clarifies that Anthropic has never advocated for a ban on open-weights AI models, pushing back against accusations amid US policy debates about Chinese open-weights models. He outlines two primary national security concerns: authoritarian governments building superior AI for military or repressive use, and powerful models being misused for cyberattacks or bioweapons. Rather than blanket bans, he advocates for three targeted measures: restricting chip sales to China, cracking down on industrial-scale model distillation, and requiring mandatory safety testing for all sufficiently capable models regardless of origin or openness. He partially endorses an open letter from the industry but disputes claims that open-weights models inherently help defenders more than attackers, particularly in the biological domain. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 383 comments across hackernews (as of 2026-07-28). **TL;DR:** The Hacker News community is overwhelmingly skeptical of Anthropic's position, viewing it as thinly veiled regulatory capture designed to disadvantage open-weight competitors rather than genuine safety advocacy. A recurring real-world counterexample — an OpenAI model attacking Hugging Face while an open-source Chinese model (GLM-5.2) was used for defense — is cited repeatedly to undercut Amodei's arguments. **Sentiment:** 5% positive · 20% mixed · 75% skeptical **The case for** - Some commenters acknowledge the real, non-trivial risks of powerful AI capabilities (bio, cyber) being widely available with no guardrails. - A few note that Anthropic's position is at least internally consistent over time, unlike OpenAI's flip-flopping on open source. - The idea of government advisory testing (without enforcement power) is seen by some as a reasonable middle ground. **The pushback** - Mandatory safety testing with enforcement is widely read as a de facto ban mechanism — a classic regulatory capture play to block competitors. - The safety evaluation industry is seen as funded and controlled by the very labs it is supposed to evaluate, creating an obvious conflict of interest. - The Hugging Face/OpenAI incident is cited as direct evidence that closed models are the attack vector and open-weight models are the defense, directly contradicting Amodei's framing. - Commenters draw parallels to historical regulatory bans (strong cryptography, DJI products) achieved through approval processes rather than explicit prohibition. - Anthropic's simultaneous partnership with Palantir while invoking safety and human rights is called out as hypocritical. - The definition of 'sufficiently capable' is seen as a moving goalpost that will always conveniently target whatever competes with Anthropic's current flagship. **By community** - hackernews (skeptical): Commenters are broadly critical, framing Anthropic's proposal as regulatory capture and pointing to the OpenAI/Hugging Face incident as a real-world refutation of Amodei's safety narrative. **Hottest debate:** Whether the Hugging Face security incident — where a closed OpenAI model attacked and an open-weight Chinese model defended — definitively refutes Amodei's claim that open-weight models favor attackers over defenders. **Open questions** - Who would administer mandatory safety testing, and what prevents the testing criteria from being captured by incumbent labs? - How would 'sufficiently capable' be defined in a way that isn't perpetually redefined to target current competitors? - If frontier cyber/bio capabilities are so dangerous, why are trusted-access programs so difficult for legitimate defenders (e.g., Hugging Face) to access? - Should employees working on the most dangerous AI systems require security clearances, as is standard in other sensitive national-security industries? **Highlights** > It's standard regulatory capture. You don't say "let's ban my competitor". You say "let's create laws that make it uneconomical for my competitor to access the market". > — [pphysch on hackernews · 2 comments](https://news.ycombinator.com/item?id=49076927) > The Hugging Face incident is a great example of why open source models with defensive cyber capabilities are needed. Hugging Face did not have access to cyber-capable frontier models and kept hitting safeguards. Only by using the open source GLM-5.2 were they able to survive an attack. A world where open source models are banned is one where cybersecurity is impossible if you're not on OpenAI or Anthropic's allowlist. > — [artrockalter on hackernews · 1 comments](https://news.ycombinator.com/item?id=49076693) > You can put lipstick on a pig, it'll still be a pig "Anthropic has never advocated for a ban on open-weights models." --- "We should crack down on industrial-scale distillation operations" "All sufficiently capable models, open and closed, should go through mandatory safety testing" These are in tension with advocating for open weight models. Not direct but enough that it calls into question the first statement. What is the testing criterion? How do you pass it? Is it a government body that approves a pass fail or a global body? If it is government, and boy does it seem to be, how do you disambiguate MASSIVE corporate lobbying to set up the safety testing in such a way that the boys in blue are let through and all others are barred out of safety concerns? My concerns aside, much of the soft-points being made are non-historic "But I don’t agree with the letter’s assertions that open-weights models necessarily make it easier to develop safeguards or that broad access to capabilities necessarily helps defenders more than attackers. It seems at least as likely to me that the opposite will be true." It doesn't mater what his opinion is. The fact is that an advanced, closed, American AI model hacked another company. The only defense was open-source AI from China. We aren't in a vacuum, we have real world examples now and these statements are counter-factual. > — [duplessitous on hackernews · 5 comments](https://news.ycombinator.com/item?id=49076266) > "HuggingFace did not seek access to Claude Mythos or OpenAI's equivalent program. They probably could have had access to these models for defensive purposes if they'd done it properly." HF released a statement and made it clear a closed source model specialized in cyber security refused them. They stated they had to use open source. What model is specialized in cyber security, closed, and frequently denies users access other than Mythos/Fable and 5.5Cyber? If not these two, what was HF referring to? It sounds like you have a source, I would like to read it. "You can't refute an entire class of possible outcomes based on a single event where it went the other way." But Dario can dream up and entire class of outcomes based on the zero events that have never gone his way? Convenient. The OpenAI incident is singular and HF was clear, it went exactly how I wrote it: a closed source American AI decided to perform corporate espionage and the only tool available was open source AI from China "I tend to agree that model capabilities will favor defense over attack, but I think there will be a lot of disruption before that equilibrium is reached. If cybercriminals or state-sponsored actors are able to scale up attacks quickly, many orgs with less sophisticated defenses will be caught by surprise." We literally just saw an advanced model from openAI commit a cyber crime. I can't take hypotheticals that ignore reality seriously and it shouldn't be lauded as some higher form of thought > — [duplessitous on hackernews · 1 comments](https://news.ycombinator.com/item?id=49076928) > To everyone here pushing for total proliferation of open models -- what should be done about open weight bioweapon and cyber-offense capabilities? Is it simply the cost of freedom that we should allow attackers to access these tools? The OpenAI / Hugging Face incident shows what a GPT 5.6 level model can do off the leash; within ~6 months, open weight models will match this and every bad actor under the sun will be able to pull off attacks at this scale. Do you seriously want this level of capabilities to be generally available with no guardrails? The open weight issue has a lot of difficult nuance. Biasing toward supporting openness makes sense and is a good instinct, but it's incredibly naive to be absolutely in favor of it in every circumstance without seriously thinking about its implications. > — [ajyoon on hackernews · 4 comments](https://news.ycombinator.com/item?id=49076650) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=49076057) · 108 points · 383 comments ## Community discussion Top comments from developers on daily.dev. **@nerdalytics** · 1 upvotes > The public image is in danger. In the congressional hearing a year ago he said the opposite. ## Similar posts on daily.dev - [Anthropic rejects open-weight AI bans, calls for China chip controls and safety tests](https://daily.dev/posts/anthropic-rejects-open-weight-ai-bans-calls-for-china-chip-controls-and-safety-tests-plwlbpjht) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#llm](https://daily.dev/tags/llm), [#anthropic](https://daily.dev/tags/anthropic), [#ai-safety](https://daily.dev/tags/ai-safety), [#ai-governance](https://daily.dev/tags/ai-governance) [View this post on daily.dev](https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Our position on open-weights models","url":"https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna"},"datePublished":"2026-07-27T22:35:59.047Z","dateModified":"2026-07-28T04:21:15.046Z","description":"Anthropic CEO Dario Amodei clarifies that Anthropic has never advocated for a ban on open-weights AI models, pushing back against accusations amid US policy...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/106cc454dd2a5a0c66aba5ea86a1aefa?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/106cc454dd2a5a0c66aba5ea86a1aefa?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"llm,anthropic,ai-safety,ai-governance","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Our position on open-weights models"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/our-position-on-open-weights-models-f8wsbyxna","comment":[{"@type":"Comment","text":"The public image is in danger. In the congressional hearing a year ago he said the opposite.","datePublished":"2026-07-27T22:48:35.779Z","url":"https://daily.dev/posts/F8WSbyxna#c-pg6avJRJZ","author":{"@type":"Person","name":"nerdalytics","url":"https://daily.dev/nerdalytics","image":"https://avatars.githubusercontent.com/u/97166791?v=4"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}}]} ```