Very interesting. DeepSeek is open weights and open so that allows people to run it themselves. Claiming that information is going back to China is clearly false. This is obviously a protectionist play and I'm super worried they're going to apply this to American people too.
The DHS order is a federal supply-chain ban on government systems and contractors, not a ban on Americans using DeepSeek — and open weights don't erase DHS's stated risks, which cover hosted data flows, third-party integrations, and possible malware.
The same supply-chain logic is already spreading to consumer devices through FCC rules and state bans, so the fear that it could reach ordinary Americans isn't baseless.
4 details5 sources3 disagreements
- The order, signed July 24 and published Oct 19 under the Federal Acquisition Supply Chain Security Act, covers DeepSeek, its affiliates, and third-party products or services built on DeepSeek implementations — so even a self-hosted open-weight model inside a vendor product is in scope.
- DHS said use 'may result in the transfer of sensitive data to the PRC if used by U.S. government employees or vendors' and that models 'could produce actionable intelligence on US persons and/or government agencies' and 'may contain malware or other security vulnerabilities.'
- DeepSeek's hosted API sends chat requests to api.deepseek.com; only self-hosting avoids sending inference data to DeepSeek's servers. No federal law currently stops private citizens or businesses from using the API or self-hosting.
- The broader trend is real: the FCC votes Oct 29 on barring Chinese labs from testing US electronics, and it already banned new Chinese drone and router models; New York, Tennessee, and Virginia have banned DeepSeek on government devices.
Room for disagreement
- DHS and the Trump administration call this a national-security supply-chain action; DeepSeek and open-source advocates call it protectionism, noting no public evidence of actual exfiltration has been released.
- Anthropic and the House Select Committee on China point to DeepSeek's ties to Beijing and alleged illicit distillation, which they say justifies the security concern.
- The order itself is precautionary — DHS uses 'may' and 'could' — so the gap between stated risk and proven harm is a real point of dispute.
But if a government agency ran DeepSeek on their own hardware, cut off from the internet, that would be safe, right? Is that allowable?
No — an air-gapped, self-hosted DeepSeek deployment is still a DeepSeek product, and the DHS order bars civilian federal agencies from using DeepSeek products or anything built on them unless DHS grants an exception.
This closes the 'open weights' loophole for federal agencies: technical isolation doesn't get around a supply-chain exclusion.
4 details4 sources1 disagreement
- The DHS order bans 'DeepSeek products' from civilian federal IT and procurement, and extends to 'third-party products and services developed using DeepSeek implementations' — self-hosting doesn't remove it from that definition.
- Air-gapping does address the biggest data-flow worry: DeepSeek's hosted app/API processes prompts on China-based servers, while a locally run open-weight model can keep data on the machine.
- But DHS also cited possible malware and security flaws in the models; open weights are inspectable, but public code also invites tampering, so offline doesn't equal verified safe.
- An agency that believes it needs DeepSeek-linked tools can apply for an exception within 60 days, with written justification; an air-gapped setup would need that approval, not just technical measures.
Room for disagreement
- One analysis (AI in China) argues self-hosted open-weight deployments fall outside the order because it targets DeepSeek's own services and third-party products; the order's text is broad enough to cover them, and DHS hasn't issued a self-hosted carve-out.
Well I guess you just proved my point, though, that this is really about a protectionist move by the United States to make sure foreign competition doesn't affect our companies, which seems crazy. That's not how capitalism works.
The ban is a national-security supply-chain action under a 2018 law first used against Kaspersky and Huawei, not a tariff-style protectionist play — but the open-weight nature of DeepSeek makes the security rationale genuinely contested, and the competitive stakes give critics real ammunition.
If the rationale is security, the order stays narrow and fact-driven; if it is protectionism, it signals the US will use procurement rules to fight the AI race, not just defend its networks.
5 details6 sources3 disagreements
- The DHS order uses the Federal Acquisition Supply Chain Security Act (FASCSA), the same statute previously deployed against Russian antivirus maker Kaspersky and Chinese telecom gear maker Huawei — foreign adversaries, not commercial rivals.
- The security case is bipartisan and international: a House panel called DeepSeek a "profound threat," alleging it harvests US user data for China's government; Australia, Italy, Taiwan, and South Korea have also restricted it, and Texas was the first US state to ban it on government devices.
- DeepSeek's own privacy policy says data from its hosted chat service is stored on servers in the People's Republic of China and may be shared with Chinese law enforcement and public authorities.
- The order covers only federal civilian agencies, contractors, and third-party tools built on DeepSeek — not private companies, individuals, or state governments, so the protectionist sweep is narrower than critics fear.
- The competitive angle is real: DeepSeek's low-cost, open-weight models undercut US AI labs, and the US has separately restricted AI chip exports to China — which is why China's Commerce Ministry called the order "strong dissatisfaction and firm opposition."
Room for disagreement
- Security hawks, including the bipartisan House panel and US officials, say DeepSeek is a genuine espionage vector: its privacy policy sends hosted-user data to China, and officials allege it aids China's military and evaded export controls.
- Open-source advocates and some security experts counter that the open weights can be run locally or in Western data centers with no data leaving the host, and Luta Security's Katie Moussouris argues the third-party clause is broader than national security requires and unenforceable in practice — which lends weight to the protectionist reading.
- The US also blacklisted American company Anthropic over military AI safeguards, which cuts against the claim that the US only targets foreign competitors.
0
AI answers with web search. May be wrong.
