Kimi：威胁还是隐患？

本周，中国公司月之暗面（Moonshot AI）发布了旗下 Kimi 模型的新版本，不出所料地引发了一波关于中国与开源 AI 的讨论。

月之暗面表示，尽管 Kimi K3“在性能上仍落后于最强大的闭源模型 Claude Fable 5 和 GPT 5.6 Sol”，但该新开源模型“在我们的评测套件中展示了前沿水平的表现，始终优于其他被测模型”。来自 Arena.ai 和 Vals AI 的独立分析也表明，Kimi 足以与各家旗舰前沿模型竞争。

此次发布恰逢中国国家主席习近平在上海世界人工智能大会发表演讲，似乎吓坏了华尔街，纳斯达克指数周五下跌约 1%，投资者纷纷抛售英伟达等芯片公司股票。

由此而来的许多科技界人士的发帖，对于那些还记得另一家中国公司 DeepSeek 于 2025 年 1 月发布其开源 R1 模型后那场争论的人来说，会感到熟悉。只不过眼下，在特朗普政府与中国的关税战、围绕Anthropic 据称构成的国家安全威胁的反复争斗，以及多家主要 AI 公司终于准备上市的背景下，一切似乎都变得更尖锐了。

例如，特朗普政府的前人工智能沙皇、现总统科技顾问委员会联合主席 David Sacks 将 Kimi 的进展与美国进行了对比，称美国正在“自我束缚：政客和官僚们正在禁止建设新数据中心，叠加各州监管，并推动新联邦机构对前沿模型进行预审。这就是输掉 AI 竞赛的方式。”（这则消息还给了他一个挖苦 Anthropic 的机会，称 Claude 是“觉醒的脑叶切除模型”的典型，是“美国竞争力的敌人”。）

前 Uber 首席执行官 Travis Kalanick 呼应了这种抱怨，称中国正在“蒸馏”（即在输出结果上进行训练）美国 AI 模型。

Kalanick 写道：“如果不加禁止蒸馏，那么人人都应该能从其他所有模型那里进行蒸馏……否则就等于[绑住了]美国模型的一只胳膊。”（当然，美国模型也曾构建在中国模型之上，特别是 Kimi。）

与此同时，OpenAI 的战略未来负责人 Dean Ball 表示，Kimi 是“一个非常优秀的模型”，其性能恐怕无法“用蒸馏或类似理由搪塞过去”，并补充说他“个人感到意外的是，考虑到潜在风险，中国政府居然继续允许将如此优秀的模型开源。”

事实上，Ball 认为“在一个开源权重模型主导的世界里，很可能的结果就是彻底的 AI 共产主义”，即 AI 被当作“一种‘公共物品’，最终由国家作为一种‘数字公共基础设施’来提供”。

“这种未来让我觉得像是一个反乌托邦地狱，但我从未遇到过一个开源权重模型的倡导者最终不承认这正是结局所在，” Ball 说。他甚至暗示，特朗普政府（他曾为其工作）最终会意识到需要“为使用中国开源权重模型制造大量监管风险”。

“你不需要‘禁止开源’（这是 AI 政策讨论中比较愚蠢的主题之一），” Ball 说，“你只需要指示每个机构发布软性规则，制造恐惧、不确定性和怀疑（FUD）。‘美联储一份咨询公告发现，中国 AI 模型可能存在后门。’甚至不需要有太充分的佐证。你只需制造足够的监管风险，让所有受监管的企业退避三舍。”

然而，专注于 AI 的媒体 Transformer 的编辑 Shakeel Hashim 认为，大部分担忧都被夸大了，一方面因为 Kimi“可能不具备危险的网络能力”，另一方面一旦这些模型发展出相应能力，中国政府将面临“极其相似的激励”去限制中国开源模型。

Chinese company Moonshot AI released a new version of its Kimi model this week, leading to a perhaps-inevitable wave of discourse about China and open source AI.

Moonshot said that although Kimi K3 “still trails the most powerful proprietary models, Claude Fable 5 and GPT 5.6 Sol,” the new open source model “demonstrated frontier-level performance across our evaluation suite, consistently outperforming other tested models.” Independent analyses from Arena.ai and Vals AI also suggested that Kimi is competitive with flagship frontier models.

The announcement, which coincided with a speech from Chinese president Xi Jinping at the World AI Conference in Shanghai, seems to have spooked Wall Street, with the Nasdaq dropping about 1% on Friday as investors sold off stocks in chip companies like Nvidia.

Many of the resulting posts from tech industry figures will sound familiar to those who remember the debate after another Chinese company, DeepSeek, released its open source R1 model in January 2025. Except now, everything seems heightened after the Trump administration’s tariff war with China, repeated fights over the national security threat supposedly posed by Anthropic, and as major AI companies prepare to finally go public.

For example, David Sacks — the Trump administration’s former AI czar and now co-chair of the President’s Council of Advisors on Science and Technology — contrasted Kimi’s progress with a United States that is “tying itself in knots: politicians and bureaucrats are banning new data centers, piling on state regulations, and pushing for new federal agencies to pre-approve frontier models. This is how you lose the AI race.” (The news also gave him an excuse to take a dig at Anthropic, calling Claude an example of “woke lobotomized models” that are “the enemy American competitiveness.”)

And former Uber CEO Travis Kalanick echoed complaints that Chinese are “distilling off” (i.e., being trained on the outputs of) American AI models.

“If distillation isn’t enforced against, then everyone should be able to distill from everyone else.. otherwise one arm [would be] tied behind American models’ backs,” Kalanick wrote. (Of course, American models have also been built on top of Chinese ones, specifically Kimi.)

Meanwhile, OpenAI’s head of strategic futures Dean Ball said that Kimi is “a very good model” whose performance probably can’t be “explained away by distillation or anything like that,” adding that he’s “personally surprised the Chinese state continues to allow the open sourcing of models this good, given potential risks.”

In fact, Ball suggested that “probable outcome of an open-weight-model-dominant world is full AI communism,” where AI is treated as “a ‘public good’ which will ultimately be provided by the state as a kind of ‘digital public infrastructure.’”

“This future strikes me as a dystopian hellscape, but I’ve never met an open-weight models advocate who doesn’t ultimately concede this is where things end,” said Ball. He even suggested that the Trump administration (which he used to work for) will eventually realize it needs to “create large amounts of regulatory risk around the use of open-weight Chinese models.”

“You don’t need to ‘ban open source’ (one of the dumber motifs of AI policy discussion),” Ball said. “You just need to direct every agency to issue soft law that creates FUD [fear, uncertainty, and doubt]. ‘A Federal Reserve Advisory Bulletin found that there may be backdoors in Chinese AI models.’ It needn’t be that well justified. You just create enough regulatory risk that every regulated enterprise backs off.”

However, Shakeel Hashim, editor of the AI-focused publication Transformer, argued that much of the worry is overblown, both because Kimi “likely does not have dangerous cyber capabilities,” and because the Chinese government will face “extremely similar incentives” to restrict open Chinese models once they develop those capabilities.