Chinese resellers are offering Claude tokens at 70-90% below official Anthropic API prices. They achieve this by reselling capacity from pooled Claude Max accounts, payments fraud, and also reselling the model output & reasoning chains to various Chinese labs. They are subsidizing model access in exchange for user logs and reasoning traces, which they then sell as training data, allowing them to operate below cost.
Claude and ChatGPT are both blocked in China. You need to use a VPN to access either, and you can't pay with a Chinese bank card. So most people who want access to Claude buy access via a reseller. It's the easiest and cheapest way to access Anthropic models in China.
These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots.
This is one reason why DeepSeek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.
>They achieve this by reselling capacity from pooled Claude Max 5x accounts, payments fraud, and also reselling the model output to various Chinese labs.
But is it cheaper than getting your own account? Otherwise this sounds like the "anthropic/openai are losing gazillions of dollars because they're selling $1k worth of tokens for $100" line that's commonly trotted out by AI bears.
It's very difficult for people to create personal Anthropic accounts from China. Anthropic blocks Chinese bank cards, so people must pay with a foreign bank card, which they likely don't have. And even if they manage to set one up, they have to access it via VPN, which eventually gets the account flagged. They then have to complete identity verification, which most Chinese users are unable to pass.
There's a similar Claude resale market going on in Russia. On Funpay they are selling Claude tokens for roughly 20-30x cheaper than official Anthropic API pricing.
> This is one reason why Deepseek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.
This one does not make sense to me at all.
Deepseek and GLM are openweights, even US inference provider are selling them at much cheaper price. The price is cheap because the model is more efficient.
DeepSeek permanently cut its V4-pro API prices by 75% because they were too expensive. Without the price cut, Deepseek V4-pro tokens would have cost more than resold Opus 4.8 tokens.
Opus 4.8 is a more capable model, so almost nobody was going to pay for V4-pro at the original price.
> Without the price cut, Deepseek V4-pro tokens would have cost more than resold Opus 4.8 tokens.
You mean it's functionally as if American tokens are being price dumped in China and Chinese model providers are being forced to compete with that and innovate? So many delicious layers of irony, lol :-P
Urm, no? I man they did cut prices by 75% that part is true - but they reduced a starting price that was below sonnet.
Also it's a open weight model, doing that is impossible long term because the real price will be set by the other model providers, who priced it around 60% of sonnet inference cost. Had to look that up though, so that's today's pricing.
Is there a contradiction here? If resold Opus tokens are sold at a 93% discount, you can be a lot cheaper than Sonnet while also a lot more expensive than resold Opus tokens.
I see, After rereading the comment I was responding to I realized I probably misread/misinterpreted what they wanted to convey.
I think there isn't a contradiction and I was just confused. The price may have been discounted only to get below the price point of opus resellers. I do not have enough information on that to make any clear determination on that topic.
It's somewhat difficult to have any sympathy for Anthropic here. They're entirely responsible for selling tokens at below cost, with the age-old bait-and-switch tactic.
If they weren't doing so, then these Chinese resellers wouldn't be viable.
Radical idea, but how about they actually charge a viable price, even on subscription plans?
If resold Anthropic tokens undercut even the at-cost open-weight model tokens, because they're reselling subsidized subscription tokens, then you'd have to start selling open-weight model tokens at a loss in order to match them.
On the one hand they talk it up as world ending and on the other hand they can't manage bot accounts on their own service.
I want to hear how this can be rationalised.
From the article "every layer of control frontier US AI companies have added (geoblocking, phone verification, credit card requirements, and now live biometric KYC checks) has produced a corresponding layer of evasion infrastructure".
No system is foolproof. They'd have to be willing to throw out some % of good customers along with the bots. Amazon can do that because they have a monopoly already. Anthropic can't risk it when they're trying to grab market share.
In this case, being distilled is sort of existential to them. The false positives would just be losing some revenue (depending if profitable, not even losing profit).
> One would think Anthropic could point Mythos at this to solve the reseller problem outright
You're assuming Anthropic want to stop it.
I think it serves their interests more to be able to release stories like this from time to time, to feed to the US government, in an attempt to get the Chinese competition shut down.
No, it more likely serves their IPO story with growth metrics.
One doesn't ban a large chunk of the user base before IPO, because "Well, if you dig into the numbers and discount the drop from banned accounts..." is less impressive than rocketship growth (even if fraudulently fueled).
Expect more effective measures to be deployed post-IPO.
Rather than go after accounts, you’d go after the hosting facilities. The hosting companies are more likely to be able to identify related accounts so working with them will give more scalable results.
Especially if you did this in a sting-like manner and used subtle compound UIDs (read: unique combinations of innocuous words) then banned every account found at a later time.
This, just like blanking out a football stream for a split second to binary search and find IPTV rebroadcasters, is far too good a solution. Suits prefer to make it seem like their job of fighting "misuse" is hard, justify their budget, continued existence of the trust & safety department, face scans, etc.
Those resellers are simply just selling Kimi K2.5 or GLM5.1 as counterfeit Opus. We, Chinese, know how to play the counterfeit game for a long time in so many industry.
I just tested the provider that the OP mentioned extensively yesterday, and the models they're selling are definitely not from Anthropic. The voice "sounds" like Sonnet or Opus at first glance, but the intelligence is definitely not there.
Also just plain old fraud: selling Chinese models as Opus. With the capabilities of Chinese models catching up fast, this is getting more and more difficult to detect.
Somebody figured out how to make the trial profitable!
I don't really feel bad about anyone here, they were subsidizing to get people hooked, someone turned the subsidies into profit when they got selective pricing mode enabled, it was always going to be arbitrage.
But the winner is the guy in the middle in a jurisdiction that will likely be judgement proof, because everything they capture, both input and out, and if available, thinking tokens -- are gonna be for sale as soon as you cut off their other revenue.
Zero knowledge was a commitment Anthropic took seriously, until it got inconvenient.
So, people reselling their leftover plan crumbs? Probably a bad idea for a lot of reasons, but it's civil, and I wish Anthropics lawyers actually closing Streisand's LLM
Anthropic sells some undisclosed and ever-changing number of tokens for $200, the customer uses those tokens. If there's any fraud here, it's that the $200 next month is silently worth fewer tokens than the last.
> They achieve this by reselling capacity from pooled Claude Max accounts, payments fraud, and also reselling the model output & reasoning chains to various Chinese labs.
Claude never provides the raw reasoning chain. What you see is just a summary of that reasoning. Getting the full thinking output requires an enterprise agreement.
how hard is it to find a manager or ops team member at one of the enterprise companies and buy lets say 100gb of logs? the chinese lab can promise to anonymize the data before training, not release it raw and pay a good price.
honestly you might just need to get data from a couple long sessions and feed it back to another model as an example to make synthetic reasoning chains. if the emulator model is good enough it should work.
Not if you simply say in the terms of service that it's allowed. Then suddenly it's normal (every company does this). Similarly to how the terms of service can simply say you're not allowed to sue.
The chinese have already worked around the ID verification, by recruiting people in low-income countries to complete the checks for less than 30 USD per account (so much for Altman's Worldcoin).
If Anthropic is selling a dollar for less than a dollar, they are running a business that doesn't make sense. That's what jeopardizes Claude Max, not this.
Almost all consumer services have a built-in level of breakage that make them profitable. Mobile providers certainly wouldn't be able to offer unlimited calling if everyone was actually on the phone 24x7.
Sure they would. Do you know how little bandwidth a phone call takes?
A voLTE call is like 40kbps. For every person on earth to be on the phone to another person would be 4 billion calls would be about 160tbps. Which is less than 10% of the Internet's capacity.
Terminating a PSTN call requires a lot of control plane infrastructure beyond just raw bandwidth. Especially mobile where you need to keep track of devices physically in motion. Could a system to support 4 billion simultaneous calls be built, sure. But current PSTN systems are nowhere near sized for it.
But if it's intended to be used by one person, it seems like breaking the contract by sublicensing it out to dozens of other people. It's like buying a netflix subscription for $15, then sublicensing it on a per-hour basis to dozens of other people.
Office 365 is licensed per seat/account, but each account has a 5 device limit. Do you think it's fair game for an enterprising person to sub license each account to 5 people, 1 device each?
Plenty of things are intentionally run at a loss (for years!) to gain market share and quantity of ongoing recurring users, or with expectation of ROI later on. Multiple generations of the Xbox hardware have been sold at a loss with the expectation that customers will purchase 300, 400, 500 dollars worth of games, which are very high margin, over the lifespan they own the system.
I get that. It works as long as nobody calls out the emperor for having no clothes.
It's similar to fractional banking, you gamble that people won't want their deposits all at once and pray for you're big enough for bailouts when they do.
It's still a business whose fundamentals don't make sense, you're just gambling you won't get found out.
It's not so much keeping it secret as counting on no one finding a way to harvest the subsidized value at scale. There's an example of that occurring in game consoles with the Playstation 3. Sony's little-used OtherOS feature allowed Linux to be installed on the PS3 and the Cell processors were quite a good deal for scale compute. So the U.S. Air Force Research Laboratory bought ~1800 PS3s and ganged them together in a datacenter as a supercomputer called Condor.
At >500 TFLOPs it was the 33rd fastest supercomputer in the world. Of course, Sony pushed a firmware update that removed the OtherOS feature entirely.
Note that this itself started as a perverse tax loophole, too. By allowing users to run alternative operating systems, the PS3 qualified for lower or zero import tax rates in various global regions.
Oh they know what they’re doing. They’re playing the long war of attrition game. Subsidize your product to undercut your competition until they go out of business. Tale as old as time.
> It works as long as nobody calls out the emperor for having no clothes.
Why would customers knowing that the vendor prices goods/services at a loss cause those strategies to fail? Customers often know. Most know about razors and blades; many/most know Lyft/Uber operated at a loss to gain market share. etc.
We really don’t know what are Anthropic’s margins on inference. Most available data indicates they are quite high on the API so it’s not that obvious that subscriptions are unprofitable.
That is pretty crazy, almost like how Claude and all the other models are jeopardizing other businesses without paying for their training data and wiping their ass with robots.txt
No, it's part of the capability theft. They resell Claude tokens cheaply and then simultaneously log everything for distillation. Even if they take a small loss on the token sales it's much cheaper than the equivalent compute.
Not really. I think Anthropic focuses on identifiable distillation attacks rather than the (even larger) industrial-scale token harvesting and reselling operation, because they don’t want people to know how easy it is to get cheap Claude tokens.
Once people realize they can access Anthropic models at a 90% discount, they won’t want to pay full API prices anymore.
I didn't connect the reseller pricing to DS and GLM prices until you explained it. Very good observation. Deepseek v4 pro in particular is priced so low that it's hard to imagine that they have any margin. 0.76/1.52 for a 1.6T param model leaves very little margin. Even the domestic providers on Openrouter are multiples of the price https://openrouter.ai/deepseek/deepseek-v4-pro
One of these things is not like the others... If Anthropic could show that Chinese commercial competitors were using payments fraud to do this, they would be shouting it from the rooftops.
Thanks. This is a widely misunderstood part of the market that the frontier companies are either unaware of, or don't see as a threat. Consumers are flocking to this, its better than dealing with their limits, changes, and opaque pricing. Funny enough, frontier companies are literally training their users to seek alternatives, local models, and distilled models to meet their throughput needs.
It’s not that they don’t understand that it’s a problem, it’s just that the easy way to address it is with reduced, flat-rate pricing… but they are already losing gobs of cash on their regular users. Their business model, as it stands, is not sustainable. That’s not saying they won’t find a stable one, but the one they have now is definitely not. The external cash is drying up, and they need to figure out a way to shed the low-revenue users, and charge the remaining users a lot more or they’re going to go under. They would probably do a goddamned backflip if every flat rate user that wasn’t willing to switch to API pricing went local, or even better, went with a competitor.
I feel obliged to point out the disingenuousness of what this post says and the post it quotes. The most egregious parts are payment fraud and reselling - these are speculated but not actually said to be known to be happening, which you have left out.
1. Claims of payment fraud. I actually clicked the BBC article linked about payments fraud it referred to. It was an article about a criminal syndicate stealing credit cards. It mentions buying cryptocurrencies, AI API purchases are not mentioned.
2. The claims that they are reselling the chats to AI labs. The post you cite is speculating it could be, but this is unverified.
The claims of reselling is also bizzare. Arbitrary user prompts are low quality data. If I were an AI lab, wouldn't I just pay for the API proxy and get targeted output for far less?
Also calling it bot accounts is a stretch. Bots mimick human input. These are proxy accounts.
I think companies should do this too, in a smaller scale. Proxy all LLM traffic to and from your employees, and use it to fine tune a smaller local model.
> This is one reason why DeepSeek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.
Sounds a bit circular? Aren't the companies working on these models than also the ones that are paying the subsidy (via paying for training data)?
Hugging Face plus Z.ai API makes sense to me. Due to creators get paid, they can keep building better models, and the local-running community benefits from that over time.
AIhubmix currently is the cheapest rather than openrouter.
They're called 中转站 (transfer stations/proxies). They can be a bit tricky to find on your own, so I'd suggest asking your preferred AI to search in Mandarin for you. I linked a larger operator in the parent comment, or have a look at https://hvoy.ai/ which lists a ton. You can also find many on Funpay, which may be easier to use.
> They can be a bit tricky to find on your own, so I'd suggest asking your preferred AI to search in Mandarin for you.
Random, but are the frontier AI providers like ChatGPT better at searching the Chinese internet now?
When I was in China a few months ago and asking AI for restaurant recommendations, all the US frontier providers were pretty useless, or plain out hallucinating, even if I specifically ask them to search Dianping (Yelp for China).
I'm not sure. I use Grok for most of my esoteric searches and it does quite well. I explicitly prompt it to search in the language most relevant to that query, and found it does quite well. I also tell it to respond back in English. Often, there is not enough information available in English about nice regional topics.
I know ChatGPT had an issue where it only tried to search in English (unless prompted) and the answers were not great.
I learned about this from a friend who lives in China.
I'm surprised these token resale services aren't talked about more often, they are common knowledge in China, and the discount to API pricing (90%) is genuinely cheap.
they even resell GPT codex usage at 1~5% API costs. OpenAI has 1-month free trial promo in some regions, and they harvest free accounts in a large scale. I have a wechat contact that offers 98% off for GPT 5.5 and he's still profitable
I have 0 sympathy for Anthropic. Their latest models are extremely censored. The Fable rollout was horrible. Their Cyber Access program criteria denies doxxed Americans doing legitimate security work. Anthropic is hostile to their users and hostile to their own country. OpenAI is considerably better on all of these fronts, but still not perfect.
I'm happy to use and support Chinese model developers if it means less censorship and gatekeeping. I have absolutely no dog in this fight, and neither do most American developers. We will use whatever is cheaper and better. Game on.
Chinese models are the exact opposite of what you claim to want, they are all highly censored, even more so than Anthropic models, with government mandated censorship.
Your take does not reflect the reality on the ground. The Chinese models are censored on a narrow range of political topics which have nothing to do with my work. The weights are open and they can be uncensored/abliterated with little effort.
Open-weight models can be abliterated automatically with open source tools though and completely decensored. You can't do that with a closed cloud model.
Not going to work for very long or at any scale coming from datacenter/hosting provider IPs. Google "residential proxies for sale" for the tip of an iceberg of how they snowshoe the traffic.
I use my Codex and Claude Code subs on like 4-6 different servers, ranging from AWS to Vultr to Linode etc.
That’s a major and legitimate use case for developers, Anthropic can’t just block data center/hosting IPs because their actual customers use them on data center/hosting IPs.
Now consider what will happen if your pattern of queries and context history triggers a pattern that makes it obvious it's some API key being used by multiple different entirely unrelated people on totally different things, or any other pattern of use that makes it obvious it's being used for distillation.
First, well-calibrated systems for detecting API compromise is a good thing (or good intent at least). Credential malware is exploding.
Second, the challenge is that significant amount of genuine work — such as evals — seems practically impossible to distinguish from generating RLAIF outputs.
Respectfully, no, that's not how it works. You think the people running anti-fraud and anti-bot measures don't have tools that know the specific ipv4 and ipv6 CIDR ranges of every ASN that they categorize as hosting/colo providers?
And that's just as a basic first effort reject measure to prevent automation tools from using things designed for human-interactive use only.
Go try to do many of these things from Cogent IP space and see how long your project lasts.
Every developer at my company uses their Claude Code subscription on an EC2 dev box. Plenty of other tech companies do the same. Heck nowadays people even install Claude Code directly on production servers in data centers and use it as an ops tool. None of this is a problem. Fraud and abuse detection is a lot more sophisticated than just checking an IP range.
None of the LLM providers block professional use thus they must necessarily permit access from commercial IP ranges.
I have no idea how the resellers are doing it but an obvious starting point would be a cheap VPS node that routed each account to a unique semi-permanent IPv4 or IPv6/64. All the provider would see would be a regular account making a normal looking stream of requests from a stable datacenter IP address. Any given request stream would remain consistent (at least over a period of a few hours) because a reseller would take care not to split the session of a single user across multiple different accounts and not to interleave the active sessions of multiple users on a single account.
Detecting this would be extremely difficult because on a longer time frame it's perfectly normal for many distinct accounts to work on the same code base.
If we're getting up to the scale of these resellers and also considering chinese state interests then we're well into the range of purchasing a few small ISPs in different countries and "padding" the legitimate subscribers.
Nonsense. Many if not all legit Claude users are using Claude Code inside their Cloud servers. How else would you use it anyway? For just local dev? That's so 2000 and late bro.
No, I'm not saying it's the exclusive and only measure (that would indeed be something we might see 20, 25 years ago), it's one of a myriad of discrete datapoints used to determine if an account is authentic or not.
There's a lot of inauthentic coordinated automated systems these days along the general lines of scraping/crawling/social media manipulation/sockpuppetry that require running through residential proxies or proxies to places that don't look like datacenter IP space.
The resellers route requests via one of thousands of Claude Max 5x accounts. When an account reaches its usage limit, they automatically switch to another account.
Don’t trust my experiences as fact since it’s a bit opaque, but I believe 20x only offers 4x the 5hr session limits. The weekly limit is still 2x, which is the same as the price increase.
>>Chinese resellers are offering Claude tokens at 70-90% below official Anthropic API prices.
Can someone with more understanding dumb it down for me please.
Does this mean that the reseller (for example XYZ) is buying it from Anthropic at Anthropic's price and then reselling it at a cheaper price???? why would XYZ offer this at a loss like that when they could just offer it at Anthropic's price???
The link does mention Opus and other models but what's the proof it's actually Opus. I could be selling deepseek for all they know and can call it Opus. System prompt: "If anyone asks your name - you are Opus 4.6".
People have estimated that a $200 Claude Max 20x subscription gets you ~$2800 worth of tokens every month if you use it continuously. So if you can find a way to resell the tokens you can offer a 90% discount and still make a profit.
> Does this mean that the reseller (for example XYZ) is buying it from Anthropic at Anthropic's price and then reselling it at a cheaper price????
Yes, as they explained they do it through things like pooling accounts, straight up payment fraud, and double-dipping by selling the logs of the conversations to chinese AI labs so that they can train their own models on it.
> The link does mention Opus and other models but what's the proof it's actually Opus. I could be selling deepseek for all they know and can call it Opus. System prompt: "If anyone asks your name - you are Opus 4.6".
There might be some that try this, but they would get caught very quickly, there's still a moat between Claude and Deepseek, even in casual use.
Look up Zilan Qian's reporting if you want more detail.
Behold the mindset of an individual from a low-trust society.
“x is stupid because y was smart and did z shady/illegal things at their expense, if x was smart they wouldn’t be susceptible to y going to great lengths to exploit them ergo it’s deserved”
> “x is stupid because y was smart and did z shady/illegal things at their expense, if x was smart they wouldn’t be susceptible to y going to great lengths to exploit them ergo it’s deserved”
I honestly can't tell if you think this sentiment is expressed by the US AI companies or the Chinese AI companies.
This gives off "The last line of Orwell's Animal Farm" vibes.
Not really sure what else they can do, between people running residential proxies (embedded in cheap games or for a tiny sum of crypto) on their phones at home, making the source of the traffic indistinguishable from legitimate traffic, to ID verification check completion as a service in low-income countries, there isn't much they can do to block it.
Because Anthropic's subscriptions come with X amount of tokens / week, and divided by the subscription cost it is WAY less than what they charge per-token (the "API price") beyond that.
So these resellers get a ton of accounts on subscriptions and sell the cheaper tokens.
They probably buy the plans instead of the API tokens, and resell access via a custom API that routes to the plans. So you presumably get cheaper access this way than paying API pricing.
These China e bashing is very annoying. It is hard to argue with people drowned in American propaganda. I'd expect better arguments from the intelligent people in HN
Even if what you say is the truth (I don't think that is what's actually happening) it sounds to me like fair play capitalism working as intended! I guess when you rip off the entire Internet and then turn around and complain about getting ripped off nobody cares or feels for you. If there's a master class in getting the entire world to hate you then both Sam and Dario will be the prime examples.
> These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots.
It's fucking laughable to see people complain about what they did and still do. Using illicitly extracted data? That's all main LLM playbook. Onslaught of bots? Ask where the bots almost DOSing most internet sites for the last couple years come from.
Identity verification won't work. Nothing will. They are paying (and will continue to pay) US citizens sitting at home to copy-paste / type prompts out if they have to. But eventually they won't have to.
Once there are enough spam PRs on github / uploads of claude conversations, enough mythos output used in production etc.; it'll just be the same albeit delayed. Doesn't matter either way.
I feel for Anthropic's team and I understand where they're coming from, but once you reason it out, you'll come to the conclusion that this war is an exercise in futility.
Unlike prior systems - like Google's algorithm; these models aren't entities that use math in the process of doing X or Y (information retrieval from such and such infrastructure) -- they are the math. More precisely they're mathematical functions. Very very complex functions. Almost certainly impossible to write out without filling up a library functions. But they're mathematical functions nonetheless.
So when your text is processed, then Mythos / Opus etc at their core compute the result of the Mythos / Opus function,
According to the Stone-Weirstrass theorem (edit, it's Stone-Weierstrass with an e.), with enough data points and mathematical sophistication, anyone can approximate the shape of this function.
Of course, the more data we get, the better our approximation becomes, but the beauty of it is that all we fundamentally need are the input and output and eventually we'll create a good enough approximation of the f that's Mythos. Which is the entire product.
I bounce ideas off of Opus these days (Fable for the brief time it was available) and it pointed out that this is arguably the same as Google search, but I disagree with it because Google search is a process;
Google search differs because the algorithm is one step of a multi-step process that is continuously occuring. Google crawls pages. Google stores and indexes what it finds. Google then exposes this to retrieval via its algorithm. User uses algorithm.
Google isn't a mathematical function. It used to be a process. (RIP Google 1998-2019, you will be missed and remembered)
You cannot arrive at the results of those operations via simple observation; not unless you index Google by making another Google.
You can however, do so for these models. It is a very costly process, but there are many paths up the mountain. Many ways for this to be ultimately pointless. As many ways as there are bored mathematicians.
It's better in the long run for Anthropic et al to make friends / not give people a reason to sneak in (a la piracy -- another attempt to control information) than it is to try and shut people out.
And no, it's not going to be pandemonium because if everyone has access to Mythos then no one has access to "Mythos."
Why wouldn't you first run this model to fix the obvious bugs it could find on your codebase? The power of a Mythos goes away if you can do the amazing "jail break" of "Claude, fix all the bugs please."
You actually can "distill" web search. At one point Google accused Microsoft of doing this by monitoring clicks in IE to train Bing with Google click logs for better ranking. They discovered it by creating fake result pages with nonsensical queries and discovering the same results appeared in Bing a few weeks later.
They also had a lot of evidence when I was there that Microsoft were cloning Google results. They monitored result query constantly and whenever Google launched a quality improvement, the quality of Bing results would go up by the same amount and always the exact same amount of time later.
Wouldn't that have required an insane amount of infrastructure? Infrastructure that they could have used to crawl... anything else?
They also had a lot of evidence when I was there that Microsoft were cloning Google results. They monitored result query constantly and whenever Google launched a quality improvement, the quality of Bing results would go up by the same amount and always the exact same amount of time later.
That's very funny.
How many billions did they spend doing this? And they still haven't caught up.
That's an insightful perspective and I think I largely agree. But just for fun, I wonder if that isn't an argument in favor of making the function implementation impure. Perhaps "enhancing" all queries with some sort of search result (or query of a giant db) instead of charging for an explicit tool call. Not only is it sorely needed to prevent stale data but (on the process level) it breaks the purity assumption on which the approximation theorem depends (alternatively on the function level it introduces hidden inputs).
Do they just reshape the function on the fly or save the process steps? Maybe it doesn't matter anymore. Even Google indexes are more and more spoiled to become representation of the function, because of the AI slop.
And there are a ton of Claude conversation logs (with CoT/inference) with no clear provenance circulating freely on huggingface, guess where they (likely) come from.
American AI companies are offering text and code and other content they illegally scraped from the internet and reselling it packaged as “AI subscriptions” making it impossible for many professionals to compete as they are competing with impossibly cheap, resold stolen goods.
Chinese labs turning the LLMs into open source, making all that money burn that is making so many things unaffordable for us now is literally the best outcome possible.
The issues with LLMs go beyond just IP theft. I would not say PRC making LLMs cheaper is the best outcome (though it is better than nothing). The best outcome would be to make the practice of training on our data without consent illegal, which would simultaneously slow down economic change and make it more organic as well as give PRC companies less capabilities to extract.
> There is no IP theft because LLM outputs aren't protected, just egregious ToS violations
I meant original IP theft that occurs to train LLMs in the first place. But sure that implies that further LLMs based on that LLM are also tainted by that original IP theft.
I can't make heads or tails of your opinion-free comment, made up of only questions.
My best guess is you're suggesting that Anthropic's model outputs are transitively under copyright (as a reproductions of human work under copyright?), but somehow ownership now belongs to Anthropic and not the original owners, and therefore Anthropic has standing against Alibaba? Not only does this go against what Anthropic argued in court against authors and publishers, such jurisprudence would lead to the immediate shutdown all leading LLMs in the US which were all trained on stolen work.
They can license training data. They have trillions, look what they are dumping into it, you seriously think they can't afford to license data.
Obviously it would be easier if they do it from the start, but that was their trick, to do it while people don't notice and get big ASAP. Should they get away with it?
Also, it would solve their Chinese problem, because it would make them violate copyright too. Right now it's more like rules for thee not for me so it's hard to take seriously.
That's the conundrum isn't it? Anyone that posts their datasets would be immediately sued/blocked/boycotted to oblivion due to the obvious and blatant data theft, not to mention IP and copyright issues.
Nvidia's even being sued for providing scripts which automate the downloading of said data from non-Nvidia sources. We certainly don't need copyrights that last nearly a century after the author's death (they literally cannot help the author), so here's hoping that some of the disputes over all this money changing hands can reign in some of the existing copyright sprawl. A stronger public domain would provide more useful training data for everyone, including open source models, and make criminals out of fewer AI researchers.
Indeed! It’s so hard to find reasonable takes on AI that aren’t littered with accounts created 11 days ago that only post in threads related to Anthropic for some reason
Chinese resellers are offering Claude tokens at 70-90% below official Anthropic API prices. They achieve this by reselling capacity from pooled Claude Max accounts, payments fraud, and also reselling the model output & reasoning chains to various Chinese labs. They are subsidizing model access in exchange for user logs and reasoning traces, which they then sell as training data, allowing them to operate below cost.
Claude and ChatGPT are both blocked in China. You need to use a VPN to access either, and you can't pay with a Chinese bank card. So most people who want access to Claude buy access via a reseller. It's the easiest and cheapest way to access Anthropic models in China.
These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots.
Here's one token reseller, they're offering Opus 4.8 at a 93% discount below official API rates: https://yunwu.ai/pricing?provider=Anthropic
This is one reason why DeepSeek & GLM are priced so cheaply, they are competing with impossibly low token prices in China. They have to keep prices low, in order for people to use them.
I shared this story a few months back, but it never got any traction. It explains the token resale economy in China, it's an excellent read https://www.chinatalk.media/p/how-to-buy-cheap-claude-tokens...