Tech
From PGP to Mythos: a brief history of export controls that didn’t stop anyone
Last Friday, citing unspecified national security concerns, the White House ordered Anthropic to restrict the export of its powerful AI models Fable and Mythos to anyone outside of the United States, as well as foreign nationals inside the country. Shortly after, the AI giant hastily pulled the plug on both models, which have now been unavailable to anyone for a week.
The episode is the first real test of whether the U.S. government can use export controls to contain frontier AI the way it has tried, with very uneven results, to contain encryption and spyware before it. And dramatic as it may sound, how this standoff gets resolved could shape not just Anthropic’s access to foreign markets but the rulebook that other AI labs will have to build around.
Some context first. Ever since Anthropic launched Mythos in April, the company has marketed it as some kind of Doomsday cyber machine that could wreak havoc on the internet if released too widely — which is why, before the ban, only around 150 vetted companies and government organizations had access to it at all. The goal was helping defenders secure their software and services before the bad guys could reach Mythos-like capabilities.
So what triggered the ban? Two subsequent events, reportedly. The first: Anthropic gave a South Korean telecom access to Mythos through its limited partner program, and U.S. officials grew alarmed after identifying the company as one they suspected had ties to China. (The company, widely reported to be SK Telecom, has denied any China connection.) Amazon CEO Andy Jassy also reportedly alerted the administration after Amazon’s own researchers, he said, found a way around Fable 5’s safeguards. Anthropic disputes the “jailbreak” label, calling it a narrow, already-patched issue rather than a wholesale defeat of the model’s safety measures.
The result was the same: the Commerce Department issued an export control directive, and Anthropic had to scramble to immediately limit access to its products — within roughly 90 minutes of being notified, by some accounts.
None of this is new, though. Governments have tried to use export controls to limit the proliferation of what they see as dangerous cyber technology for decades, but their track record has been middling at best.
The U.S. government was behind what is perhaps history’s most spectacular failure of this approach in the early to mid-1990s. At the time, computer scientists were developing encryption technologies to secure data as it traveled over the internet. One of those encryption products was called Pretty Good Privacy, or PGP, a popular software that could encrypt data and make it virtually impossible to unscramble even if intercepted as it traveled to its intended recipient over the internet.
The U.S. government initially saw PGP as a dangerous weapon, fearing it would prevent its intelligence agencies from snooping on emails as they crossed their wires. To stop the distribution of PGP, the U.S. Customs Service opened a criminal investigation against PGP’s creator Phil Zimmermann for allegedly violating arms export controls. He fought back by publishing PGP’s source code as a printed book, igniting what is known today as the “Crypto Wars.”
Zimmermann later won a key battle when the investigation was closed, paving the way for crucial end-to-end encryption algorithms such as the one used by billions of Signal and WhatsApp users.
Later during the early 2010s, researchers began discovering Western-made spyware used against dissidents in the Middle East. In response, several governments agreed to expand the Wassenaar Arrangement, an international treaty that limits the export of dual-use software and technologies that are used in both civilian and military applications.
The idea was to classify surveillance and hacking software as dual-use, thus forcing spyware makers to get export licenses to sell their products abroad.
Contact Us
Do you have more information about the Mythos ban? From a non-work device and network, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.
But Wassenaar has always had two inherent weaknesses. There are several countries that don’t adhere to the agreement, including Israel, which houses some of the world’s most active spyware makers.
The agreement also depends on countries applying it to companies within their borders at their own discretion. For a time, the Italian government allowed one of the country’s then-top spyware makers, Hacking Team, a license to export its tools around the world, despite the company’s track record of selling spyware to oppressive governments that used it to hack journalists and human rights activists.
Since then, other countries in Europe have been lax with spyware makers like Italy. Despite numerous scandals, Europe, home to many spyware and hacking tools makers, has continually failed to curb the export of spyware to authoritarian regimes. Critics say that a recently renewed effort across the bloc of 27 member states to tackle its growing problem of spyware exports to authoritarian states “does not go far enough.”
Several spyware makers, such as Intellexa, a sanctioned consortium of spyware companies, have simply moved their operations to countries with lax export controls. Other spyware makers sought to move their operations to Saudi Arabia for similar reasons.
There have been some wins. Germany-based spyware maker FinFisher shut down in 2022 after a multi-year investigation by German prosecutors into the company for allegedly selling spyware to Turkey without an export license. Investigators previously found the FinFisher spyware had been deployed on the phones of critics of Turkey’s government.
As of the time of writing, the impasse between Anthropic and the Trump administration remains. There is a reasonable chance the administration will buckle and lift the restriction in the interest of keeping American AI companies competitive worldwide — a move that would amount to tacit acknowledgment that AI labs elsewhere, including in China, will likely reach similar capabilities regardless of what the U.S. restricts. Or, American AI companies could end up needing government approval before serving foreign customers at all, a compliance burden that would invariably dent their bottom line.
Given the past experiences that world governments have had with trying to control the reach of software, government-mandated export controls are unlikely to be the right approach to stop malicious actors from abusing powerful dual-use cyber technologies.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
Source: Elastic agrees to buy CRV-backed Deductive AI for up to $85M
Deductive AI, a startup that uses AI to catch and resolve bugs in software, has agreed to be sold to enterprise software company Elastic for up to $85 million, according to a person with knowledge of the deal.
Deductive, which was founded in 2023, came out stealth last November when it announced a $7.5 million seed round led by CRV with participation from Databricks Ventures, Thomvest Ventures, and PrimeSet. The investment valued the startup at $33 million, according to PitchBook.
Elastic and Deductive did not respond to multiple requests for comment. TechCrunch will update this article if either company responds.
The sale marks a speedy exit for Deductive, which is operating in a fast-growing sector known as AI site reliability engineering (AI SRE). Building AI-powered SRE tools has become an important area, driven by the massive influx of AI-written code. Replacing manual debugging with AI enables human SREs to shift focus from constantly fixing outages and other problems to spending more time on helping with product development.
The acquisition reflects a broader trend in which established tech incumbents are looking to buy AI-native startups to integrate agentic technologies into their existing product suites, the source told TechCrunch.
Elastic, which went public in 2018, is best known for Elasticsearch, the search and analytics engine that helps organizations store, search, analyze, and monitor large amounts of data in near real time.
The company’s observability software — essentially tools that let engineers monitor software systems and detect security threats — could benefit from Deductive’s tech. According to the source, integrating Deductive’s AI technology into Elastic will enhance its observability platform by giving customers tools to automatically monitor performance and resolve system failures in real time.
Deductive was co-founded by Rakesh Kothari, who was previously VP of engineering at Lightspeed-backed business analytics startup ThoughtSpot, and Sameer Agarwal, who formerly worked at Apache Software Foundation and Meta. Agrawal was one of the founding engineers at Databricks.
While Deductive reached roughly $1 million in annual recurring revenue (ARR,) according to the source, the startup’s growth lagged behind Resolve AI, one of the sectors’ perceived early winners. The two-year-old Resolve was co-founded by former Splunk executive Spiros Xanthos and Mayank Agarwal. The Greylock and Lightspeed-backed startup was last valued at $1.5 billion when it raised a $40 million Series A extension in April.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
The US says ASML’s top chip tool may be in China, but how?
According to Bloomberg, U.S. Commerce Secretary Howard Lutnick has, in a series of recent meetings, told senior ASML executives he’s concerned that one of the Dutch chipmaker’s extreme ultraviolet lithography machines — the EUV systems that are the only tools on Earth capable of printing the most advanced semiconductor patterns — may have ended up in China. That would be a major breach of export controls that have barred ASML from selling EUV to China since the first Trump administration.
It’s a serious claim. Senior administration officials told Bloomberg they have evidence that ASML shipped EUV-related components and transport equipment to China, though they’ve declined, repeatedly, to show it — to Bloomberg or, apparently, to ASML itself. The company says no such machine exists in China and has never existed there. The Commerce Department didn’t respond to Bloomberg’s questions about whether it has evidence of an actual EUV system on Chinese soil.
You might think this isn’t worth paying attention to if you’re outside the chip industry, but it is. ASML is a Dutch company most people have never heard of, but it is, by a wide margin, the most important company in the global AI buildout that isn’t named Nvidia or one of the hyperscalers. It makes the only machines on the planet capable of EUV lithography — the process of printing the microscopic circuit patterns that define the most advanced chips.
Every cutting-edge processor made by TSMC, the foundry behind Nvidia’s and Apple’s chips, depends on ASML tools that took the company roughly two decades and untold billions to develop. There is, at present, no second supplier. That monopoly has made ASML Europe’s most valuable public company, with a market capitalization that has been trading in the neighborhood of $700 billion as of this week, up sharply over the past year on the back of insatiable AI-driven chip demand.
That scale is exactly why the China question matters so much. If even one EUV machine made it into Chinese hands, it would represent one of the most consequential breaches of the export-control regime the U.S. has built over the past several years to keep advanced AI capability out of Beijing’s military and industrial base.
I sat down with ASML CEO Christophe Fouquet six weeks ago, well before this story broke, and asked him directly about the China question.
Fouquet told me ASML tracks every machine it has ever shipped — they’re either in active use with monitored customers or have been dismantled and returned to the company. He said the firm built an internal firewall years ago: Employees who can access EUV technology, documentation, and training are walled off from those who can’t, and ASML’s China-based staff sit on the wrong side of that wall by design. He argued the only reason ASML could build an EUV machine at all was that 80% of it already existed from decades of prior knowledge, and that solving the one genuinely new problem — generating EUV light itself — took 20 years on its own. His broader point seemed to be that you can’t reverse-engineer a machine you’ve never had, and nobody in China has had one.
There’s also a simpler commercial logic that cuts against the idea that ASML would risk its export license to quietly arm a Chinese customer. ASML does sell older-generation deep ultraviolet tools to China — gear it first shipped a decade ago — but Fouquet framed that explicitly as a protective calculation, not a loophole. The idea, he suggested, is that it keeps enough of a generational gap that customers can still do business — but without manufacturing its own future competitor. ASML expects roughly 20% of its 2026 revenue to come from already-permitted sales to China. Risking the EUV ban entirely would put that revenue, and the company’s standing as the most valuable monopoly in European industry, on the line over a single illegal sale.
None of this proves the allegations are false. The government hasn’t yet made its evidence public, and it’s worth withholding judgment until it does.
The Commerce Department, under Lutnick’s leadership, agreed late last year to put up to $150 million of taxpayer money into xLight, a startup developing a next-generation light-source technology that’s been written about as a long-term challenge to the core of ASML’s EUV monopoly. xLight’s own CEO told me last year that the company sees itself as a future partner to ASML, not a rival, building hardware meant to plug into ASML’s machines rather than replace them. When I put that framing to Fouquet in May, he was polite about it but unconvinced; ASML, he made clear, doesn’t see itself as needing xLight’s technology to keep its lead.
Does that have anything to do with why Lutnick is suddenly pressing ASML on EUV? Nothing public connects the two. It could be entirely unrelated. But a federal official scrutinizing a monopoly while his own agency has money riding on a startup angling to improve that monopoly’s core technology is worth examining.
xLight isn’t the only outside bet on the future of lithography. Peter Thiel — who has his own long-running ties to Trump’s political orbit — has backed Substrate, a separate startup explicitly pursuing its own EUV-rival technology, with ambitions to compete with ASML more directly than xLight says it intends to.
As Bloomberg notes, a bipartisan bill moving through Congress would go much further than EUV — it calls for an effective ban on all of ASML’s deep ultraviolet (DUV) shipments to China, the less advanced lithography tools that account for roughly a fifth of the company’s expected 2026 revenue. The bill cleared a key committee in April, and the Trump administration hasn’t taken a formal position on it.
Pictured above: ASML CEO Christophe Fouquet.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
The CEO of Allbirds’ new AI biz has a plan, but no team
When Allbirds pivoted to AI in April, it felt like a joke from “Silicon Valley” breaking free of the TV: The direct-to-consumer shoe purveyor whose flimsy kicks helped define what we’ll loosely call “Silicon Valley style” had discovered a new trend to chase.
The move was right out of the meme stock playbook written by GameStop: Take a troubled public company, latch on to the hottest fad, and reap the rewards of a rising stock price as retail investors pile in.
Well, it worked. The company sold its shoe business for $43 million, raised another $100 million from the stock market, and now it’s called Smartbird.
Now Nadia Carlsten has to make it work. A former AWS executive with an engineering PhD, Carlsten most recently led the European compute company DCAI before she began yesterday as Smartbird’s CEO.
“We’re going to be recruiting a brand-new team for the AI business, and we’re going to be getting an office,” Carlsten told TechCrunch from Amsterdam. “The shoe business has officially closed as of yesterday, so that’s all done … The first task that I’m tackling right now is rounding up the leadership team, looking for somebody to lead infrastructure operations, for example.”
Call it a startup with a sole founder and a very large seed round. What’s next is less clear.
Smartbird aims to be an AI infrastructure provider, latching on to the seemingly bottomless demand for compute to train and run deep learning models. But unlike neoclouds, which relentlessly arbitrage the price of chips against the cost of GPU time or inference tokens, Carlsten will be aiming at more carefully managed deployments. The ideal Smartbird customers need direct control over the servers running their models — typically for political or business-model reasons — and value data sovereignty over the scalability of the public cloud.
Carlsten couldn’t yet estimate the size of that market and argued that it was fairly nascent, since many companies are still just piloting AI tools. At DCAI, she worked with Novo Nordisk and other European firms that take a special interest in data sovereignty or operate bespoke models: “We certainly have anybody that’s within the pharmaceutical industry, energy industry, financial, the public sector,” she said.
To Carlsten’s view, that means Smartbird isn’t competing with hyperscalers or neoclouds, but with internal company projects. Still, there are established companies in this space — Hewlett Packard offers a single-tenant managed AI compute service, as does Equinix, the data center giant.
It’s a real business model, but it’s not clear if it has the same growth potential as the cloud services, where expansion is the be-all and end-all. Carlsten said she expects to have compute clusters deployed for several customers by the end of the year. Other startups, like the inference cloud General Compute, have bigger ambitions — the company announced a $300 billion chip order when it came out of stealth last month.
Carlsten says she doesn’t need big chip commitments to realize Smartbird’s vision, because her potential customers needs sit in the range of hundreds to thousands of chips — it’s “not about large scales and huge numbers of GPUs; they’re more about agility of these clusters, and more about having control of the infrastructure stack.”
Smartbird is also unlikely to compete with rivals on price, since cloud services go to great lengths to optimize chip usage 24 hours a day to offer the cheapest compute, though Carlsten suspects that companies with specialized workflows will be able to work more efficiently with their own servers.
Demand for AI infrastructure is a powerful force in the market, driving up the stock prices for chipmakers, cloud providers, and energy companies, even convincing investors that orbital data centers are a feasible idea. But Carlsten insists that Allbird’s transition was carefully thought through.
“It wasn’t, ‘Let’s just do AI, because it’s AI, and it’s hot,’” Carlsten, who will be paid a $700,000 annual salary and was awarded stock worth about $9 million to take the job, said. “It was really about, do we have a chance to build a business over time that is going to find this niche in the market and be able to grow over time?”
When Allbirds pivoted, one thing that went by the wayside was its public benefit corporation (PBC) status, which had been intended to enshrine the sustainability commitments that were part of the shoe company’s pitch. PBC charters are often used by companies to highlight non-financial promises. OpenAI, for example, is a PBC with a focus on AI safety. This change of direction, however, suggests PBCs are hardly ironclad.
Carlsten said that Smartbird’s board made a long-term commitment to execute against her AI strategy.
“There are some companies out there chasing AI,” she told TechCrunch, “but at the end of the day, what matters is, is there actual weight behind the chasing?”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
