From PGP to Mythos: 30 Years of Failed Cyber Export Controls

TechCrunch Senior Writer Lorenzo Franceschi-Bicchierai published the structural-history read of the Anthropic Fable 5 directive on June 19, 2026. The piece surveys the 1993 Phil Zimmermann PGP prosecution, the 2013 Wassenaar dual-use spyware expansion, the Italian Hacking Team case, the Intellexa sanctions, and the German FinFisher shutdown, and concludes that export controls on dual-use cyber technology have an unbroken 30-year track record of failing to contain the underlying capability. The historical analogy is the entire Fable 5 precedent.

State of Surveillance Editorial Team

A close-up macro photograph of a green printed circuit board with surface-mount components, the visual shorthand for the dual-use cyber-infrastructure hardware the 30-year export-control debate has tried, and failed, to contain
Photo via Unsplash

Today in Surveillance (Day 9, late-afternoon cycle):

  • TechCrunch Senior Writer Lorenzo Franceschi-Bicchierai published the structural-history read of the Anthropic Fable 5 directive on June 19, 2026, arguing that 30 years of US dual-use cyber export controls have an unbroken record of failing to contain the underlying capability. The piece, "From PGP to Mythos: a brief history of export controls that didn't stop anyone," walked through four case studies: the 1993 Phil Zimmermann PGP prosecution, the 2013 Wassenaar Arrangement expansion to cover dual-use surveillance software, the Italian Hacking Team license-to-export case, and the German FinFisher shutdown in 2022. Franceschi-Bicchierai's thesis: export controls on knowledge have never worked, and export controls on hosted services work only by destroying the host's commercial viability. The Hacker News thread crossed 67 points and 29 comments within four hours of posting, crossing the 50-point TIER-1 threshold at approximately 15:50 UTC on June 20.[1][2]
  • The piece documents the 1993 Phil Zimmermann PGP prosecution as the foundational case study of US export-control failure on encryption software. Zimmermann wrote PGP, the "Pretty Good Privacy" program that made strong encryption accessible to anyone. The US Customs Service opened a criminal investigation against Zimmermann for allegedly violating arms export controls. Zimmermann fought back by publishing PGP's source code as a printed book, exploiting the First Amendment protection of printed material to make the code legally exportable as a book. The case was eventually closed without charges. Zimmermann's fight paved the way for the end-to-end encryption algorithms now used by billions of Signal and WhatsApp users.[3][4]
  • The piece walks through the 2013 Wassenaar Arrangement expansion to cover dual-use surveillance software, and the structural weaknesses that have made it unenforceable. Wassenaar is an international treaty that limits the export of dual-use software and technologies used in both civilian and military applications. The 2013 expansion added surveillance and hacking software to the controlled categories. Two inherent weaknesses have limited Wassenaar's effectiveness: several major countries do not adhere to the agreement, including Israel (home to NSO Group, Candiru, and other active spyware makers); and the agreement depends on member states applying it at their own discretion, which has produced documented license-to-export cases like Italy's handling of Hacking Team.[5][6]
  • The piece documents specific enforcement failures: Italy licensed Hacking Team to export its tools to oppressive governments despite a documented track record of sales to authoritarian regimes. The Hacking Team case is the canonical European enforcement failure. Italy's government granted Hacking Team an export license for its surveillance tools even as the company sold to governments that used the tools against journalists and human rights activists. Several European spyware makers have moved operations to jurisdictions with lax export controls. Intellexa, the sanctioned consortium of spyware companies, has relocated across borders to evade controls. Other makers explored Saudi Arabia as a relocation target.[7][8]
  • The piece documents one enforcement success: Germany-based FinFisher shut down in 2022 after a multi-year German prosecutor investigation into alleged sales to Turkey without an export license. FinFisher's spyware had been documented on the phones of critics of the Turkish government. The German shutdown is the rare case where the dual-use export-control regime produced an actual corporate-killing outcome. The pattern is asymmetric: most enforcement fails, a small number of cases succeed, and the underlying capability continues to proliferate regardless.[9]
  • The Mythos case the piece sets up is structurally different from the prior failures but the trajectory is the same. Franceschi-Bicchierai frames the Fable 5 directive as the first real test of whether export controls can contain frontier AI the way they have tried, with very uneven results, to contain encryption and spyware. The triggering events were a South Korean telecom (widely reported to be SK Telecom) gaining Mythos access through Anthropic's limited partner program, and Amazon CEO Andy Jassy alerting the administration after Amazon's researchers reportedly found a way around Fable 5's safeguards. Anthropic had to comply within roughly 90 minutes of being notified. The HN thread's structural read: Mythos is a service, not source code; export controls on services can be enforced more tightly than export controls on knowledge; but the enforcement path here killed the commercial product rather than the underlying capability.[10][11]

What Landed on June 19, 2026

Lorenzo Franceschi-Bicchierai published the structural-history piece on TechCrunch at 15:40 UTC on Friday June 19, 2026, seven days after the Fable 5 export-control directive forced Anthropic to pull both top models offline.

The piece is the engagement-justified consolidation of the Fable 5 procedural-precedent argument. The two earlier TechCrunch pieces by Zack Whittaker (June 15) consolidated the political-and-personal framing of the directive and the Wassenaar 2010s cybersecurity export rule analogue. The Register's "fix this code" piece (June 16) consolidated the technical-record rebuttal. The Franceschi-Bicchierai piece is the historical-structural capstone that ties all three threads to the 30-year arc. The arc is the procedural precedent. The precedent is the durable consequence.

The 1993 PGP Prosecution: The Original Export-Control Failure

The piece's foundational case study is the 1993 US Customs Service prosecution of Phil Zimmermann, the creator of PGP, for allegedly violating arms export controls by distributing strong encryption software outside the United States.

Zimmermann had written PGP, the "Pretty Good Privacy" program, in 1991. PGP made strong public-key encryption accessible to anyone who could run the software. The US government initially treated strong encryption as a weapon, fearing it would prevent intelligence agencies from intercepting communications. The State Department's ITAR (International Traffic in Arms Regulations) classified strong encryption as a munition. Distributing PGP outside the US without an export license was, on the books, equivalent to exporting a surface-to-air missile.[3][4]

The investigation was opened after Zimmermann posted PGP on a US internet server where it could be downloaded by users abroad. Zimmermann's defense exploited a First Amendment loophole: he published the complete PGP source code as a printed book, which MIT Press agreed to distribute internationally. Printed material is protected speech under the First Amendment, and Customs cannot stop books at the border. The source code was technically now exportable as a book.[4]

The investigation was closed in January 1996 without charges. The political fallout was substantial: the Clinton administration reversed course on encryption export controls later that year, and the legacy is the end-to-end encryption now embedded in Signal and WhatsApp, used by billions of people globally. The Zimmermann case is the canonical example of export controls failing on knowledge. The capability (public-key encryption) proliferated. The regulatory attempt to contain it produced a five-year legal fight, a First Amendment workaround, and the eventual abandonment of the policy.[3]

The Franceschi-Bicchierai read: the Zimmermann case is the structural analogue to today's Fable 5 directive. The capability (strong encryption in 1993, frontier AI in 2026) is the kind of dual-use cyber technology that has historically defeated export-control attempts by spreading faster than the regulatory machinery can contain it. The Zimmermann case ended with the policy abandoned. The Fable 5 directive is at the beginning of a similar arc.

The 2013 Wassenaar Expansion: Dual-Use Spyware Software

The piece's second case study is the 2013 Wassenaar Arrangement expansion to cover dual-use surveillance and hacking software.

Wassenaar is a multilateral export-control regime established in 1996. The 41 participating states agreed to coordinate export controls on dual-use goods and technologies that have both civilian and military applications. The original Wassenaar controls focused on conventional weapons, materials-processing equipment, and electronics. The 2013 plenary added intrusion software and IP network surveillance systems to the controlled categories, after civil-society campaigns documented the proliferation of Western-made spyware to authoritarian regimes.[5]

The expansion was driven by Citizen Lab and EFF documentation of NSO Group's Pegasus, FinFisher's FinSpy, and Hacking Team's Remote Control System being deployed against journalists, dissidents, and human rights activists in Mexico, the UAE, Ethiopia, and Saudi Arabia. The civil-society argument: these tools could not have been deployed without export licenses from the countries where the makers were headquartered (Israel, Germany, and Italy respectively).[6]

The Wassenaar regime has two inherent weaknesses, which Franceschi-Bicchierai names explicitly. First, several major countries do not adhere to the agreement, including Israel, which is home to some of the world's most active spyware makers. Second, the agreement depends on member states applying it at their own discretion. Italy's handling of Hacking Team is the canonical case: the Italian government granted Hacking Team an export license even as the company sold to governments that used the tools against journalists and human rights activists.[7]

The post-2013 record is uneven. The German prosecutor's investigation into FinFisher produced a 2022 shutdown, the rare case where the dual-use export-control regime worked. The Intellexa consortium was sanctioned by the US Treasury's OFAC in 2024 under Executive Order 14014, the first US sanctions action on a spyware maker, but the consortium had already relocated across borders to evade controls. Other spyware makers explored Saudi Arabia as a relocation target.[8][9]

The Franceschi-Bicchierai read: the Wassenaar expansion is the structural analogue for the Fable 5 directive. The dual-use category was added in 2013 because civil-society documentation made the proliferation politically unsustainable. The Wassenaar enforcement regime is multilateral, voluntary, and patchy. The 30-year record is asymmetric: most enforcement fails, a small number of cases succeed, and the underlying capability continues to proliferate regardless.

The Mythos Triggering Events: SK Telecom and Jassy

The piece walks through the specific events that triggered the Fable 5 directive on Friday June 12, 2026.

Two events, reportedly, drove the Commerce Department's enforcement action. First: Anthropic had given a South Korean telecom access to Mythos through its limited partner program. US officials grew alarmed after identifying the company as one they suspected had ties to China. The company, widely reported to be SK Telecom, has denied any China connection.[11]

Second: Amazon CEO Andy Jassy reportedly alerted the administration after Amazon's own researchers, per the WSJ reporting, found a way around Fable 5's safeguards. The Jassy alert triggered the immediate directive. Anthropic disputes the "jailbreak" framing. The Commerce Department issued the export-control directive. Anthropic had to scramble to immediately limit access to its products, within roughly 90 minutes of being notified.[10]

Franceschi-Bicchierai's structural read: the Fable 5 directive was a unilateral Commerce Department action, citing unspecified national security concerns, executed within 90 minutes of the trigger. The procedural precedent matches the Wassenaar pattern: an export-control rule written without an enforceable framework, applied to a narrow technical capability, with disproportionate downstream effects. The directive did not stop the underlying capability (frontier AI development). It stopped the commercial product (Fable 5 and Mythos 5). The structural question: did the directive advance US strategic interests, or did it accelerate the relocation of frontier AI development to jurisdictions that will not honor US export controls?

The HN discourse captured the asymmetry. Commenter mfuzzey on HN thread 48609194 noted: "There's no effective way of enforcing export controls on local software like PGP etc. Whatever they say someone will leak it. It is possible to shutdown access to hosted services, as happened with Fable, but it can't really be done selectively."[2] The HN read is that Mythos is structurally different from PGP because Mythos is a service Anthropic controls, not source code that can be printed and mailed as a book. The trade-off is that export controls on services can be enforced more tightly than export controls on knowledge, but the enforcement path here killed the commercial product rather than the underlying capability.

The Structural Synthesis: Why Export Controls on Dual-Use Cyber Don't Work

Look at the three case studies side by side and the Fable 5 directive is a 30-year-old pattern repeating itself with a new technology and a new enforcement path.

The Zimmermann case shows export controls on knowledge (public-key encryption) failed: the capability proliferated, the prosecution was abandoned, and the policy was reversed within five years. The Wassenaar expansion shows export controls on dual-use surveillance software have an asymmetric enforcement record: most enforcement fails, a small number of cases succeed, and the underlying capability continues to proliferate regardless. The Fable 5 directive is the new test case: export controls on a hosted frontier AI service, with the commercial product killed but the underlying capability (frontier AI development) continuing in non-US jurisdictions.[1]

The Franceschi-Bicchierai conclusion: "Given the past experiences that world governments have had with trying to control the reach of software, government-mandated export controls are unlikely to be the right approach to stop malicious actors from abusing powerful dual-use cyber technologies."[1] The conclusion is the procedural precedent. The precedent is the load-bearing structural argument.

The HN thread extended the structural argument in two specific ways. Commenter themgt noted: "You've now got Huawei Ascend 950, GLM-5.2 at Opus 4.8 levels, China dominating OSS models, and Z.ai saying they'll have a Fable-level model by EOY. I would say the export controls have utterly, utterly failed."[2] Commenter ReptileMan framed the structural asymmetry: "History shows that export controls fail on knowledge, but are damn effective on commercial products."[2]

The structural synthesis: export controls work on hosted commercial services only when the host is willing to comply. The compliance path kills the commercial product. The capability continues to develop elsewhere. The 30-year record is asymmetric: enforcement succeeds when the target is a discrete commercial product willing to comply; enforcement fails when the target is a body of knowledge or a commercial product in a jurisdiction outside the controlling state's reach.

What to Watch in the Next 7 Days

  • First formal Anthropic response to the Franceschi-Bicchierai structural-history framing. The TechCrunch piece is the first Tier-1 popular-press feature to consolidate the 30-year structural read. The first formal Anthropic response will signal whether Anthropic treats the directive as a one-off dispute or as the precedent that will shape its global strategy.
  • First named Commerce Department official statement on the dual-use-cyber-export-control historical precedent. The Commerce Department has not yet publicly engaged the historical-record critique. The first named official statement will be the first signal of whether the directive is the opening of a sustained policy posture or a one-off action.
  • First Wassenaar expert-review participant public statement on the Fable 5 directive. The Wassenaar expert-review group unwound the 2013 cybersecurity export rule in 2017. The first public statement from a named Wassenaar expert-review participant on the Fable 5 directive will be the first durable institutional signal of how the historical-analogue critique applies to the new case.
  • First GLM-5.2 or Huawei Ascend 950 benchmark disclosure from a named AI lab outside the US. The HN discourse is anchored on the empirical observation that GLM-5.2 is already at Opus 4.8 levels and Huawei's next-generation AI chips will not require any US-controlled supply chain. The first formal benchmark disclosure from a named non-US AI lab will be the first empirical confirmation of the structural relocation the directive accelerated.
  • First EU AI Office or European Commission statement on the directive's practical consequences for EU AI policy. The directive's implications for European AI regulation were named by Justin Hendrix in the earlier TechCrunch piece on the directive. The first formal EU statement will be the first cross-border regulatory signal of whether the directive is being acted on by a foreign regulator.
  • First named AI-security community statement (USENIX, IEEE S&P, or ACM CCS) on the dual-use-cyber-export-control precedent. The Moussouris Luta Security technical read is the first journalistic report of the practitioner pushback. The first formal academic-community statement on the dual-use-cyber-export-control precedent will be the first durable institutional signal of whether the AI-security community treats the directive as a one-off dispute or as the durable precedent the TechCrunch piece names.

The Bottom Line

TechCrunch Senior Writer Lorenzo Franceschi-Bicchierai's June 19, 2026, "From PGP to Mythos" piece is the first Tier-1 popular-press feature to argue that the Fable 5 directive is the 2026 case in a 30-year-old pattern of failed dual-use cyber export controls. The piece walks through the 1993 Phil Zimmermann PGP prosecution, the 2013 Wassenaar Arrangement dual-use spyware expansion, the Italian Hacking Team license-to-export case, the Intellexa sanctions, and the German FinFisher shutdown. The conclusion: export controls on knowledge have never worked, export controls on dual-use commercial products have an asymmetric enforcement record, and export controls on hosted services kill the commercial product rather than the underlying capability.

Sources

  1. TechCrunch: From PGP to Mythos: a brief history of export controls that didn't stop anyone (Lorenzo Franceschi-Bicchierai, Senior Writer at TechCrunch, June 19, 2026, 15:40 UTC / 3:40 PM PDT, HN id 48609194, 67 pts / 29 comments at 16:08 UTC June 20 scan; the structural-history read of the Fable 5 directive, the 1993 Zimmermann PGP case, the 2013 Wassenaar dual-use spyware expansion, the Hacking Team Italian case, the Intellexa sanctions, the FinFisher shutdown)
  2. Hacker News: From PGP to Mythos thread (news.ycombinator.com, item 48609194, June 20, 2026, 67+ pts, 29 comments at 16:08 UTC scan; the shareable engagement thread, 0.48 p/min + 0.22 c/min sustained compound, the encryption-policy beat with Fable 5 + BIS 2026 export-control debate tie-back, the mfuzzey / ReptileMan / themgt / kccqzy / HarHarVeryFunny / Holacc structural-asymmetry discourse)
  3. Wikipedia: Phil Zimmermann (the canonical Arms Export Control Act investigation section covering the 1993-1996 PGP prosecution, the source-code-as-printed-book First Amendment workaround, the case closure without charges in January 1996, the foundation case study of US export-control failure on encryption)
  4. Wikipedia: Export of cryptography from the United States (the 1990s Crypto Wars context, the State Department's ITAR classification of encryption as a munition under Category XIII, the 1996-2000 policy reversal that paved the way for end-to-end encryption in Signal and WhatsApp, the Bernstein v. United States parallel case)
  5. Wikipedia: Wassenaar Arrangement (the 41-state multilateral export-control regime, the 2013 plenary expansion adding intrusion software and IP network surveillance systems to the dual-use controlled categories, the inherent weaknesses of a multilateral voluntary regime)
  6. EFF: Encryption Export Controls (the EFF Coders' Rights Project documentation of the Wassenaar implementation failures 2013-2017, the Hacking Team Italy license case, the Intellexa sanctions consortium, the cross-border relocation pattern of dual-use spyware makers)
  7. Citizen Lab: Hacking Team research (the Italian export-license documentation, the Ethiopia / Saudi Arabia / UAE / Egypt sales, the subsequent Italian prosecutorial follow-up, the canonical European spyware-export enforcement failure)
  8. US Treasury OFAC: Intellexa Consortium sanctions designation under Executive Order 14014 (the 2024 designation of the Intellexa Consortium as the first US sanctions action on a spyware maker, the cross-border relocation pattern, the post-sanctions enforcement follow-up)
  9. Netzpolitik: FinFisher shutdown after German prosecutor investigation (the 2022 corporate dissolution following the German investigation into alleged unlicensed sales to Turkey, the documented FinFisher deployment on Turkish-government-critic phones, the rare successful dual-use-cyber-export-control enforcement case)
  10. Hacker News: Anthropic Fable 5 and Mythos 5 suspended by US export control directive (the June 12, 2026 directive, the SK Telecom partner-program trigger, the Andy Jassy escalation, the 90-minute compliance window, the global suspension of both models, the earlier TechCrunch editorial on the directive at the origin of the Fable 5 arc)
  11. SK Telecom public statement on Mythos partner-program allegations (the South Korean telecom's denial of any China connection, the response to the US export-control trigger, the denied-ties framing in the partner-program access point)