securitylab_nJuly 15, 2026🇷🇺Translated from Russian

US Prepares for Free Chinese AI Models Distributed Like Torrents, Weighs Policy Shift on Open-Source Systems

The Trump administration is preparing for the emergence of powerful Chinese AI models that any user will be able to download for free from the internet, similar to torrent distribution. This scenario is prompting Washington to reconsider existing rules governing American open-source AI systems.

Officials are currently consulting with industry representatives to establish unified capability requirements for such models. Chinese systems already available in open form are being used as the reference point. American developers may be permitted to release models of comparable performance, while more advanced developments would likely face additional restrictions.

Companies anticipate that Chinese models in the Mythos class will become publicly available within the next 6–12 months. Users will then be able to run these systems on their own hardware, modify them, and embed them into other applications without any control from the original developer.

For the United States this creates a difficult policy challenge. Harsh prohibitions could slow domestic companies without stopping the spread of foreign technologies. China is already actively developing open neural networks and distributing them freely to strengthen the international position of its developers. Some Chinese systems have gained rapid popularity after restrictions were placed on American models, largely because they remain accessible and cost less.

Simultaneously, technology companies are seeking ways to reduce electricity consumption in data centers. These facilities currently account for approximately 1.5% of global electricity usage, and the International Energy Agency expects demand to continue rising quickly.

The Washington Post observes that long-term forecasts may prove overstated. Companies are testing superconducting cables capable of transmitting more energy with lower losses, as well as optical connections that move data using light instead of electrical signals. These technologies could significantly cut the energy required to transfer information between computing devices.

Because the new solutions have not yet been deployed at scale, real-world savings remain difficult to quantify. Nevertheless, progress in superconductors and optical systems indicates that growth in computing power will not necessarily produce an equally sharp increase in electricity consumption.

Related articles

安全客Policy & Regulation

HackerOne Ends Anonymous Era for Bug Bounty Hunters with Mandatory ID Verification

HackerOne has introduced compulsory identity verification for all researchers submitting reports to paid bug bounty programs, effective August 1. The policy requires users to complete KYC checks through Estonian firm Veriff by uploading government-issued ID and performing a live selfie, with annual renewals. Vulnerability Disclosure Programs remain open to anonymous participants, but any researcher seeking monetary rewards must now reveal their identity. The move follows similar steps by Bugcrowd and Intigriti and is driven by anti-money laundering and cross-border payment regulations. Researchers in high-surveillance regions and newcomers face new barriers, while the platform argues the change improves report quality and enterprise trust. H1 Clear adds an extra criminal background check layer for elite participants.

AntiMalwarePolicy & Regulation

Telegram Briefly Removed from App Store After Apple Detects Child Sexual Abuse Material

Telegram was temporarily pulled from the App Store in multiple countries after Apple moderators identified content linked to child sexual abuse. The removal lasted roughly 20 minutes before the app was reinstated following Telegram's quick removal of the prohibited material and blocking of the responsible user. Apple cited strict App Store rules as the reason for the action. During the outage, already-installed copies continued to function normally while the app remained available via the Mac App Store and Google Play. Telegram responded on X with the quote “Rumors of my death have been greatly exaggerated” before Apple issued its official explanation. This marks at least the third documented instance of Telegram facing App Store removal, including a 2018 incident over unacceptable content and a 2024 removal from the Chinese store at the request of local regulators.

AntiMalwarePolicy & Regulation

Russia's MinTsifry Proposes Hosting Providers Detect and Report Disguised VPN Services

The Russian Ministry of Digital Development is discussing measures to strengthen oversight of VPN services that mask themselves as legitimate websites and hide their IP addresses from official blocklists. Hosting providers would be required to independently identify suspicious IP addresses and report them to regulators for potential blocking. The proposal also introduces a tiered trust system for hosting clients based on the strength of their identity verification. Users authenticated only via phone or bank card could have services terminated within 30 minutes upon violations, while those verified through Gosuslugi or biometric systems would receive more time to resolve issues. Non-compliant hosting providers risk being labeled as unreliable, resulting in restrictions that limit client access to a narrow whitelist of approved resources such as government portals, banks, and marketplaces. Industry participants warn that these restrictions could worsen IPv4 address shortages and drive legitimate businesses toward foreign hosting providers.

HabrPolicy & Regulation

Why Sending an MDM Command Does Not Mean It Has Been Executed

MDM operations such as policy assignment and device lock appear synchronous in the console but actually trigger complex asynchronous delivery chains involving backends, queues, vendor infrastructure, and device agents. The article explains that request acceptance, queue storage, external API confirmation, and actual device execution represent four distinct states that must be tracked separately. Aitera MDM implements an Outbox pattern to ensure transactional consistency between policy changes and command delivery while supporting at-least-once semantics with idempotency. Android Enterprise relies on the Android Management API and Google-controlled synchronization through Android Device Policy, whereas iOS uses APNs only for wake-up and pull-based command retrieval with statuses including Acknowledged, Error, and NotNow. The system maintains separate desired, delivery, and observed states to avoid misleading applied flags and provides detailed command history for administrators. Metrics focus on policy confirmation rates, queue age, and divergence between intended and actual device configurations rather than simple device counts.