US government website used Chinese model the FBI called "malicious"
Sep 18, 2026, 10:28 AM · Ars Technica
The Federal Register briefly offered Alibaba’s open-weight Qwen for searching public comments—days after the FBI branded Alibaba’s distillation practices malicious.
Why it matters
Ashley Belanger’s Ars Technica report, citing Reuters, says U.S. officials removed a Chinese AI search tool from the Federal Register site on Wednesday after social media noticed the National Archives using an Alibaba Qwen model. Earlier this month the FBI named Alibaba among six leading Chinese firms allegedly conducting “industrial-scale distillation” that helps China cut costs in the AI race.
It is unclear when the Qwen option first appeared; an X screenshot from September 15 and archived source code show it was live at least a day before removal. The National Archives, White House, and FBI did not comment to Ars. ITIF’s Daniel Castro called it an “insane” disconnect to use Alibaba while the FBI urges American models.
Sina.com reported the site used a small open-weight “Qwen3 0.6B level” model for document retrieval—not Alibaba’s flagship—run such that it did not send government data to Alibaba. Georgetown’s Anupam Chander and experts told Reuters substantial security risk was unlikely because Federal Register content is already public. Sen. Mark Warner flagged whether any U.S. data hit Alibaba-controlled systems. Rep. John Moolenaar said no federal entity should use Chinese AI models.
From the desk
We’re for agencies picking the best open tool for public-document search—and against policy that says “malicious” on Monday and ships Qwen on Tuesday without an explanation.
A 0.6B open-weight retriever on already-public comments is not a classified-data exfil story. The scandal is coherence: FBI industrial-scale-distillation rhetoric colliding with a government website’s model picker. If small open Chinese weights are fine when self-hosted, say so. If they are banned, procurement should have caught this before X did.
Useful AI for civic access means fast search over the Federal Register. Blocking every China-origin weight may punish the open layer Congress’s own research says the U.S. underbuilt, while export controls chase frontier chips. I’m watching for an Archives postmortem, OMB guidance on self-hosted foreign-origin weights, and whether “never use Chinese models” becomes statute or stays soundbite.
Context
Ars published on September 18, 2026. The episode lands amid broader debate over AI safeguards versus competitiveness and open-source ecosystems.
Who feels it
- Federal IT
- Inventory which open-weight models are in production and under which authority.
- Open-source buyers
- Clarify whether origin, hosting, or fine-tuning triggers restrictions.
- Congress
- Align FBI messaging, procurement rules, and small-model industrial strategy.
What to watch
- Any National Archives or GSA statement on how Qwen was selected and removed.
- Written federal guidance on self-hosted foreign-origin open weights.
- Whether Moolenaar’s hard line becomes binding policy.