> When customers use Claude to generate Outputs that then train competing models, they're essentially using our infrastructure and investment to build direct competitors to our service
Careful: pointing out this distillation hypocrisy (“rules for thee but not for me”) is liable to draw moderation deeming it “a thought-terminating cliché” that is against the HN Guidelines. See, e.g.,https://news.ycombinator.com/item?id=49007792.
I have released some of my projects as Open Source, I also have a company with privative software.
Claude and AI partners have taken all what they could from the Open Source projects without giving credit or respecting the licenses. They have increased the traffic on websites in an absolute disrespectful way increasing the hosting cost in inefficient and ridiculous ways.
They have taken all the important books and not asked permission from the authors.
Fair enough. Fair use.
Of course I would create a competitor software to Claude or any others if I could. Using Claude(and others) of course.
I am not paying you 200 dollars/month for you to tell me that I could not create code that competes with you. If you try to go to court in Europe with this you will lose.
It is just the same fair use you proclaim for taking the data from others.
A few, not all, and in fact I gave many of them away under very specific licenses, of which they have paid exactly zero mind too.
If I allow my friends into my home for a visit, does that mean I should shrug when I return home from holiday and find out they’ve helped themselves to its usage without my knowledge or permission to do so?
Nobody "owns" it for the most part. Most LLM output can not be copyrighted, because there is not enough human essence in it. Meaning that it is public domain the moment it is produced.
There might be a few exceptions, if you really guided your model in a certain particular way, but that is rare.
What /could/ be is that you violate their ToS. If that ToS is valid and legally and practically enforceable is a different question and will depend a lot on your jurisdiction.
It might depend on your jurisdiction, but LLM output is usually not copyrightable because it is not made by a human. There might be a few exceptions, if you guided the LLM in very specific and particular ways. But in general, the output of an LLM is public domain the moment it was produced.
Can you never tell anybody and just slap a license on it? Sure.
The issue here is not the license, but that you violate their ToS (if that is valid and enforceable is a different question of course). But if you publish the LLM output on github, and someone else takes it to train their LLM, and you did not actively encourage or help them, it's fine.
MIT doesn't bar additional restrictions, so you could say this is MIT except you can't train on it. GPL on the other hand does not allow additional restrictions and therefore the code would not be compatible.
but you can't copyright the output anyways. which either makes the restriction on training void or, it means the owners of the model own the copyright, and they only transfer some of the ownership to you. is there such an ownership transfer statement? i haven't seen one yet.
I hope I see the day I start seeing AI companies suing other AI companies for training their models on GitHub repositories that were written using the AI companies' models. If Anthropic says that I can't train using Claude's output, then surely OpenAI can't train on a repository that's 100% vibecoded with Claude.
> When customers use Claude to generate Outputs that then train competing models, they're essentially using our infrastructure and investment to build direct competitors to our service. Like other software and service providers, we expect that our services won't be used to undermine our product offerings.
I hope Claude wrote this because if a human being typed this we need to kill not just them but everyone that so much as shook their hands.
> Safety controls may be lost – models trained on Claude's Outputs won't have our safety measures, potentially leading to harmful or dangerous AI systems. We also have no visibility into deployment, meaning we cannot monitor how these distilled models are used or prevent misuse.
So was that why your models caused three real-world security incidents?
Wouldn't such language and reasoning from Anthropic be an argument that they needed written permission to train their model on data from websites?
Has any individual somewhere around the world tested this in court by now? Sued Anthropic for copyright infringement because Claude can reproduce information that is only available on their website?
It shouldn't be that expensive, right? If you sue them for - say - $10000 then what would the costs of such a court case be?
Personally, I think "learning" is not a copyright violation. But if they themselves make it one, then they should also face the consequences, no?
From my interpretation, in order to get the data you 'own' (it's not theirs to give away since they can't claim the copyright on it), you need to use their services. The agreement the user has with Antropic is for the service, not a restriction on how the data is used.
not being able to train in it is a restriction on using the data though.
if i publish that data, and someone else trains on it, am i liable? am i responsible to ensure that noone trains on that? how am i supposed to enforce that?
so if i publish that data, and someone else trains on it, am i liable? am i responsible to ensure that noone trains on that? how am i supposed to enforce that?
Any AI safety experts here? I'm wondering if this claim here really holds:
> Anthropic invests significantly in making Claude safe, helpful, and harmless. We conduct rigorous pre-release testing, implement multiple safety layers, and continuously monitor our models' behavior. When Outputs are used to train new models without our oversight, additional risks emerge. Safety controls may be lost – models trained on Claude's Outputs won't have our safety measures, potentially leading to harmful or dangerous AI systems.
From my understanding distillation pretty much copies behaviour. If someone intends to distill from a Model, it can't extract unsafe behaviour, but would learn the same safety mechanisms, no?
> When Outputs are used to train new models without our oversight, additional risks emerge. Safety controls may be lost - ...
---
> What you can do with Outputs
> You can use Claude's Outputs to train models that don't compete with Anthropic's own models.
Why even include that bullshit at top? It is brazenly obvious to anyone with a brain that Anthropic and other frontier AI Labs have no real way to monetize or recoup their investment unless they strongly guard the usage of their models.
"We need to control the model to protect you from evil robots, except it's fine if the evil robots are not competing with our business" is hilariously hypocritical.
That's not even the case. No one "owns" the output. Raw generative AI outputs don't come with any new (copy)rights, which are currently only granted to human creative outputs.
If more and more of the web's content is AI generated, AI companies are bound to train on each other's data.
Or, what if I generate content with Claude/ChatGPT/Gemini, warp it in HTML using an open model, put this on my website conveniently dedicated to "Best practices in prompt and AI answers" for example, then train my own model that only scraps my website?
I don't think they care about the little guy doing a bit of fine-tuning.
What they don't want is DeepSeek training their models with Claude output at scale. That's why they forbid it. Gives them a legal basis to cut off accounts doing that.
Not that it's effective because it's being done anyway.
And yes it's super hypocritical but that's another issue IMO.
If competitors like Deepseek need to distill to build similarly powerful models, that's mostly for evals right? I don't see how it can be cost-effective to distill for a significant amount of training data
But you can give them all to me and I can train my model on them. The restriction on you is not related to your ownership of that days, it's related to the contract you "signed".
Or you can publish them on the web and countless others will do it.
The shear hypocrisy of this is quite staggering. Ok, so we own the outputs, but you get to decide how we use them, and you don't trust us to use them. But the people whose books you stole to build your psychopath machine, they didn't trust you, did they. They didn't really want you to build a machine that can generate thousands of books to compete with their work, but you did do it anyway. Are you going to commit to auditing every input that was used to train your model and attain positive consent for their use for training?
It's also pretty wild to call this standard practice. It's not. I can grab any of the open weights models and train to my hearts content. So it's not standard is it. You'd like it to be standard because you don't want to compete.
And you don't trust us, but it is your company that's been going around telling us how excited you are that your model goes out onto the internet and hacking people.
This continual authoritarian bent from the least trustworthy people in the world is deeply problematic and the only saving grace is their absolute total and complete failure to enforce the restrictions they wish to place on us.
Your ability to build the God machine doesn't magically endow you with the moral authority or judgement to decide how it's used, and the fact that these people believe it does is a great indicator that they aren't to be trusted.
Honestly, the entire dev community should save question and answers, uploaded them to a shared repo anonymously, then just use that data to distill further models and provide them to the public for free.
Theoretically, this should be legal and ethical, when comparing to Anthropic's own behavior. That said, the reason you can't is Anthropic states in their terms that they don't want you to do this.
Anthropic's entire business model is skating on thin ice.
"Our Terms do not allow the use of Outputs to train models that are competitive with Anthropic's own. It is also a violation of our Terms to support a third party's attempt to do the same."
So it would be supporting third party's attempts...
Then again. I suppose lot of scrapping could happen by accident and scrappers might ignore such files as allowable-use-cases-for-site-content-must-followed.txt instructing against use in training.
Isn’t this based in contract law? The terms are between the user and Anthropic, no? If a person chooses to open source their convos, they are in violation? on what grounds?
No, they would not be in violation. And an independent third party can pick them up and train with them. But you are not allowed to "support" that third party, otherwise you violate the ToS.
There must be a clear difference between terms of the Anthropic service and the legal standing of the ai output. The output is mine and I'll do with it whatever I want. The service is Anthropic's and they can do business with whoever they want. Everything else is hallucination.
You would need a massive amount of claude output beyond anything humanly reasonably to train a model. Namely, consuming a lot of inference resources. If
you don't do that at those scale, the training will probably be quite inefficient
anyways.
Yeah, no. I was OK with them scraping everything if it means we get AI, but, conversely, they don't get to control what happens to their outputs.
Hell, arguably they should release their weights (or at least the weights of their older models), since they trained them on the concentrated knowledge of humankind.
We did so, please do not repeat it at home.
reply