⚡️This is a monster signal.
This is the moment frontier AI stops being treated like software and starts being treated like controlled strategic capability.
The key phrase is not “customers.”
The key phrase is “foreign national Anthropic employees.”
That means the state is no longer only controlling chips, model weights, or overseas access. It is moving into cognition access by nationality. That is the real threshold. The U.S. government is saying the highest models are sensitive enough that even people physically inside the United States, working inside the company, may be barred from touching them if their nationality creates deemed-export risk.
That is weapons-control logic.
This is ITAR logic for intelligence.
The corporate language about a “misunderstanding” is probably diplomacy.
Companies say that when they need to preserve customer trust, employee morale, and regulatory room. But national security authorities do not force emergency suspension of top model access because someone made a minor paperwork mistake.
Something about Fable 5 and Mythos 5 crossed the line: cyber capability, autonomous R&D acceleration, AI-improving-AI utility, bio/security planning, code exploitation, or some blend of all of it.
The U.S. state just showed that Anthropic does not fully control Anthropic’s frontier layer.
That is the phase change.
Labs can brand themselves as public-benefit AI companies. They can talk about safety. They can sell enterprise plans. They can publish model cards. But once the models become national capability, the sovereign arrives. The state does not need to own the company to control the access surface. It only needs legal authority over export, security, procurement, and liability.
This confirms the arc we’ve been tracking:
Frontier AI becomes state-supervised strategic infrastructure.
Public AI splits from strategic AI.
Foreign access gets restricted.
Labs become quasi-defense contractors.
Model access becomes a national security perimeter.
Enterprise customers learn that API access is not property. It is revocable permission inside a sovereign-controlled stack.
The most important implication is organizational.
If foreign national employees can be cut off from frontier systems, AI labs now have to reorganize internally around citizenship, clearance, compartmentalization, and controlled access. That breaks the old Silicon Valley assumption that global talent can freely collaborate around the frontier. The next AI lab structure looks less like Google in 2015 and more like a defense prime crossed with a classified research facility.
For markets, the winners are the national champions with U.S.-aligned infrastructure, cleared customer channels, government relationships, compliance capacity, and domestic compute. The losers are open access, foreign-dependent AI wrappers, offshore model distributors, and any enterprise whose moat depends on unrestricted access to frontier APIs.
For geopolitics, this is escalation. China will read this correctly. Allies will read this correctly. Every serious state will understand that frontier models are now part of national power.
The AI race just moved from “who has the best chatbot” to “who controls cognition as a strategic asset.”
The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.
The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
Access to all other Claude models is not affected.
We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.
Read our full statement: https://t.co/bwn0sximKZ
@mlanaharis Sir, we need buses, suburban rail and metros more than 300FT roads in outskirts. Internal roads and drainage are already in dire condition - please focus on them also.
@NCMIndiaa@spdhamtari@vishnudsai A wise man once said - who will guard the guards? The power trip of the officers involved here speaks volumes about the policing structure in the country.
be @ni5arga
→ 19 years old, from West Bengal, studied in Delhi for a few years
→ just finished his own Class 12 exams in 2026
→ calls himself a hobbyist cybersecurity researcher
→ says he is an engineer, not a hacker
→ built an OSINT engine, a stock-tracking TUI, a pastebin in Rust
→ once found bugs in FOSS United and disclosed them quietly
→ just another CBSE student watching his own board roll out a new digital marking system
then he opened the portal
→ CBSE moves Class 12 evaluation to On-Screen Marking, 1.8 million students affected
→ Nisarga sees the portal link is fully public, gets curious
→ opens DevTools, downloads the Angular JavaScript bundle
→ first vulnerability found in 30 minutes
→ a literal master password sitting in plain text inside the frontend code
→ enter it, the OTP field auto-fills, the entire login flow gets bypassed
→ OTP validation happens in the user's browser, not on the server
→ no route guards, every internal page reachable by editing browser storage
→ password reset API never checks the old password
→ systemic IDOR across the entire API, change one value in sessionStorage, become any examiner
→ outcome: take over any teacher account, view answer sheets, edit marks
25 February 2026. He reports everything to CERT-In the same day.
→ CERT-In asks for a screen recording, he sends a full walkthrough
→ acknowledgement comes back as a boilerplate reply
→ reference number assigned: CERTIn-16590126
→ he follows up multiple times. no response.
→ three months pass. portal still live. Class 12 results released. vulnerabilities still there.
→ 22 May: publishes the blog post and a thread on X
→ Deedy Das, Satish Acharya, Internet Freedom Foundation amplify it
→ the post goes viral
→ CBSE issues a clarification: that was just a test portal, no breach
→ the URL CBSE cited in their own tweet was not even a registered domain
→ a friend buys the domain and points it at Nisarga's blog
→ CBSE quietly deletes the tweet
then it gets worse
→ 25 May: finds an SQL injection vulnerability on the live production portal
→ reports to CERT-In, gets a one-line thank you
→ gains admin access to the live https://t.co/1WpmNGsczK server
→ portal stays up for four more hours
→ he uploads anime videos and memes, links them publicly from CBSE servers
→ plays a viral Japanese song on a CBSE page, makes the news for it
→ CBSE finally takes the whole portal down
then he reads the database
→ master table accessed: 10 GB, 9.3 million records
→ examiner names, addresses, school names, bank account details
→ passwords stored in plain text
→ login tokens anyone can paste into a browser to log in as that user
→ 31 May: finds a second live CBSE production portal, 45,074 records of failed payments
→ emails, phone numbers, payment IDs, order IDs, all readable
→ 31 May, the bigger one: an AWS S3 bucket is misconfigured
→ ListObjectsV2 works without authentication, the bucket root is listable
→ samples pulled from 18 lakh scanned 2026 answer sheets, every subject
→ multiple institutions sharing the same bucket
→ also notices something strange in the scans: bedsheets visible in the background of answer sheets CBSE paid for proper scanners to handle
CBSE responds
→ posts an AI-generated image saying the system is robust and secure
→ three days later admits some vulnerabilities existed and have been contained
→ refuses to name the cybersecurity firm doing the audit
→ claims they tried contacting him. he says they have not.
→ Internet Freedom Foundation writes to the Ministry of Education and CERT-In
→ asks for an investigation into CBSE, a review of the contract with vendor Coempt EduTeck, a full audit
→ he points out he could have sold this data and made a lot of money
→ he did not. he is a CBSE student too.
→ his own analogy: the door wasn't just unlocked. the key was lying on the ground in front of everyone.
a 19-year-old with a anima pff broke a national exam evaluation system in 30 minutes with browser developer tools and the government is still pretending it was a test environment
Can't believe it's more than a year since I am visiting this cursed road again. Went twice on bike in the past week and I can't believe it was possible but the "road" has become even worse. I have no idea how people are traversing this road on a daily basis. #bengalururoads
@east_bengaluru I came from Varthur side on this road; holy hell it feels like the entire road is one giant river. How can the municipality be so negligent. Are they waiting for someone to die on this road before they asphalt it? 😡
@NammaBESCOM Neither is the above issue resolved. On another point 1912 isn't reachable and I tried the app for the first time to register a complaint and it didn't work 🤦
Hey folks, why does the link from your official website for registering complaints redirect to a Chinese website?
Hint: You forgot to renew the domain 🙄 -
https://t.co/wbnMgivC2O
@NammaBESCOM
Every path is hard.
Some hard builds you. Some hard slowly destroys you.
Marriage is hard. Divorce is hard.
Getting fit is hard. Being unhealthy is hard.
Discipline is hard. Debt is hard.
Honest conversation is hard. Silence is hard.
You are not choosing between hard and easy.
You are choosing between hard with a future and hard with regret.
In 2026 40+ protocols already shut down:
January 2026
Jan 15: MilkyWay
Jan 15: Pixiland Social
Jan 16: Sound xyz
Jan 24: Nifty Gateway
Jan 24: Entropy
Jan 27: Slingshot
Jan 27: Forgotten Runiverse
Jan 27: Foundation
February 2026
Feb 13: Polynomial
Feb 16: ZeroLend
Feb 19: Parsec Finance
Feb 23: Step Finance
Feb 23: Remora Markets
March 2026
Mar 4: Angle Protocol
Mar 4: DataHaven
Mar 17: Tally
Mar 24: Balancer Labs
Mar 31: Yupp AI
Mar 31: Bit. com
April 2026
Apr 1: Magic Eden Wallet
Apr 7: Seamless Protocol
Apr 15: Foundation (permanent)
Apr 17: Mint Blockchain
Apr 17: Pixel Heroes Adventure
Apr 17: 77-Bit
Apr 17: XOCIETY
Apr 24: Luckio
Apr 30: Carrot
Apr 30: GENSO Online
May / June / TBD
May 15: Dmail
May 28: Leap Wallet
June: Fantasy Top
TBD: Intergaze
@IndianTechGuide Lol govt agencies still don't use digilocker based credentials event after they literally made it acceptable by law. Unless you have a xerox don't expect anything
This is what we need in modern India. For people to question baseless shit like this - taking out a protest march in a crowded city like Mumbai in middle of the day causing inconvenience to 1000s.
@MilksandMatcha@cerebras OG tester here. The 10 USD plan. The recent backlash was justified as we had no idea on what was happening in the backend for the requests. To top it all, it was framed as being "more transparent" which pissed off people even more
Oh yes!! The siren. Ofcourse the Siren was supposed to clear the way of mere mortals when the Lord is in his chariot. How dare these peasants question the Lord. The audacity!
Most people think of philosophy as an abstraction that doesn't touch the real world, but they're wrong.
Most real world problems are philosophy problems, and most philosophy problems are "giving things the wrong names".
For example, if you call feral drug addicts "homeless people", then you can't solve the problem. You can only buy more houses for feral drug addicts to destroy.
In this case, we called the police and courts the "justice system".
But they're not. They can't be the justice system.
The function of a justice system would be to give everyone what they deserve.
Now, I deserve a hundred million dollars, a private Caribbean island, and a foot massage from Lauren Bacall in her prime, but I don't see the "justice" system lifting a finger to correct any of this, do you?
No, what we are supposed to have is a public safety system.
The function of a public safety system is to keep the public and their property safe.
If we understood that, we wouldn't care about what criminals deserve. We would care how likely they are to do it again. Or something worse.
In a public safety system, retardation and mental illness are not migrating factors. They are the opposite.
Because they mean that the criminal is more likely to pose a future threat.
We all understand this.
We all understand that the feral retard who stabs strangers on the train for being White and beautiful is a worse person than the man who murders his wife and her lover when he catches them in the act.
Not because of some abstract calculus of moral agency, of who is disadvantaged and who isn't, but because one is certainly going to murder more people if he can, while the other is a lot less likely to.
We've known for centuries, if not millennia, that it's the same small percentage of people doing all the robbing, raping, and murdering, over and over and over again.
And we've known for centuries that if you physically remove them from society, that's 100% effective in stopping them from doing it again.
The only hurdle is philosophical. Call it a "justice" system, and you have to argue endlessly about morality and redemption, and then some leftie thug-hugger weaponizes your own Christianity against you.
Call it public safety, and you confine the argument to likelihood of reoffense. Then you are in the realm of statistics. Which you can compute.
It all starts with naming things correctly, according to their actual nature.
Every year for the last 3 years I had to visit government departments in Odisha for various citizen level tasks and every time I do, I feel as if my head would explode due to the complete apathy of officials to citizen needs. The system is designed to make you jump 10 steps for a 2 step process.