alt Hacker NewsLiving outside of the US (and EU). I’m in the process of launching an agent assisted automated pentesting and authorized offensive security service. I’m using open weights models to execute the entire audit. So lets for a moment entertain the idea that the US somehow locks open weights. How are they going to stop such audits or actual attackers? A competing service in the US simple won’t be able to execute the same level of audits because many of the models refuse following penetration and offensive security testing instructions. An actual attacker is not going to limit itself to those models either. Why would anyone serious about security then limit itself too.
In the end, as a non-US entity; how would the US even stop me from providing services to US companies in private? Well I have a US LLC now, but the moment they become serious about this it takes me a few weeks to incorporate in HK or SG.
Replies
Simple. If they put your company on something like the entity list that Huawei is on, nobody is going to work with you, public or private.
The US government can even force non-US banks from other countries to report oversea US citizens' income to the IRS, what makes you think they don't have the power or enforcement method to stop US-based entities from working with you?
They can put you on an entity list as mentioned, but their general goal is not to target you or other small businesses but rather larger companies. They don't care about what you do.