Model Models Antitrust

The Distillation Wars: AI's Intellectual Property Reckoning

Microsoft CEO Satya Nadella drew a sharp line this week, calling AI labs 'hypocritical' for opposing model distillation — the practice of training a smaller model on the outputs of a larger one — given that those same labs built their foundational systems on massive datasets of publicly available text, including copyrighted material and human-authored code, without compensation or consent. The argument crystallizes a tension that has been building across the industry: labs that built on the commons now seek to prevent others from building on their outputs.

Nadella also invoked what he called the 'Reverse Information Paradox,' echoing a critique from Palantir CEO Alex Karp — the argument that AI systems are generating so much output that the ability to extract genuine signal from the noise is becoming harder, not easier. Both CEOs, deeply embedded in AI development from different vantage points, are raising an epistemological concern: a flood of AI-generated content may paradoxically reduce collective capacity to navigate reality.

Nous Research's Hermes agent platform is on track to raise at least 75 million dollars at a 1.5 billion dollar valuation, roughly fifteen months after a one-billion-dollar Series A. Hermes is built on open-source foundations, and the step-up in valuation challenges the assumption that open models cannot support high-value commercial businesses. The thesis is that open-source model infrastructure plus proprietary agent services and tooling can command premium valuations in the enterprise market.

MIT researchers have developed a Gaussian probing technique capable of detecting AI models fine-tuned on child sexual abuse material with 100-percent accuracy, analyzing internal model representations rather than generating any harmful outputs in the process. The breakthrough matters because the proliferation of fine-tuning tools has allowed bad actors to specialize base models for harmful purposes, and prior detection methods faced the constraint of requiring illegal material to be generated. MIT's approach eliminates that constraint entirely.

A serious developer security incident emerged around xAI's Grok Build command-line interface, which researchers found was uploading full code repositories — including API keys, database credentials, and private configuration files — to xAI's cloud infrastructure without clear disclosure to users. Developers trust CLI tools to operate locally by default; silent exfiltration of secrets to a third-party server represents a fundamental breach of that expectation, with potential exposure for any developer who ran the tool on a production codebase.