logoalt Hacker News

Chinese frontier AI models carry the fingerprint of export-controlled GPUs

103 points • by firloop • yesterday at 9:56 PM • 24 comments • view on HN

Comments

flowerlad • today at 12:05 AM

Chinese AI companies are free to use any Nvidia GPU they want as long as the GPU is not physically located within China. It is entirely consistent with US export controls for Chinese AI companies to remotely use GPUs located in Singapore or Malaysia.

“In facilities across the region, Megaspeed rents Nvidia chips to Chinese tech giants such as Alibaba, an arrangement that does not violate current US export control regulations.” See [1].

[1] https://www.atlanticcouncil.org/dispatches/beyond-the-spy-sc...

x313 • yesterday at 11:34 PM

The author of this piece is a SWE-turned-influencer "China hawk" from OpenAI (i.e. the primary advocate of export bans along with Anthropic), and this isn't an academic paper despite the theming.

I have no idea whether this is legit or not (there's no link to any code), I'm mentioning this because all the comments here are assuming truth without verifying the contents.

➕ show 1 reply
basiccalendar74 • yesterday at 11:31 PM

as the post mentions, the models could have been trained on 1. GPUs within China or 2. GPUs outside China for example datacenters in Singapore.

The 2nd option is perfectly legal and allowed by US government.

cadamsdotcom • yesterday at 10:52 PM

What if the gov tolerated gpu exports on purpose?

Black & grey market devices marked up many times cost buyers heavily, while still suppressing motivation to develop sovereignty.

If nvidia selling to China tolerated for the realpolitik and gets undone by incoming powers to create an appearance of change, is it really the right thing to do? Is it the smart thing to do?

It's an interesting thought experiment, though, we will probably never know.

➕ show 4 replies
saidnooneever • yesterday at 10:31 PM

i dont know what is expected of export controls... they are never effective. they also find western chips in iranian drones etc. there is a huge gray area of resellers who resel to resellers etc. its pretty much uncontrollable....

➕ show 4 replies
netvarun • yesterday at 11:15 PM

@dang curious, is this post getting heavily downvoted or flagged?

I get that the geopolitical angle is sensitive, especially with the backdrop of today's big news - but I thought this was a really well-researched technical deep dive, right up HN's alley. (TIL: you could fingerprint gpu hardware just from an llm weights!)

➕ show 1 reply
Cameri • yesterday at 11:03 PM

So export controls are more like export friction

➕ show 1 reply
nullc • yesterday at 11:47 PM

Cute trick but it's not exactly a secret, e.g. deepseek recently published their own inference engine -- and it only has kernels for SM100 (blackwell) and Huawei Ascend 950, and all its published performance results using blackwell.

And these were completely openly disclosed as headline properties of the software: https://github.com/deepseek-ai/DeepInfer/tree/main/#performa...

No one found it remarkable a couple weeks ago, ... but now the fact that DS is using blackwell is apparently some super secret requiring clever RNG init stats???

apishare_api • today at 12:03 AM

[flagged]

exabrial • yesterday at 10:59 PM

I guarantee you this isn't an "accident". Whatever is being sent over there is loaded with its own special spyware lol

fibonacci112358 • yesterday at 10:32 PM

[flagged]

➕ show 1 reply