美国国土安全部周一发布命令，指示联邦民用机构不要使用中国人工智能实验室DeepSeek的技术产品，并撤除任何已有的部署。该命令（PDF）范围广泛，要求机构“放弃所有DeepSeek及其关联产品，以及使用DeepSeek实现的第三方产品和服务”。落实该命令将十分棘手，因为目前尚不清楚哪些第三方产品和服务是基于DeepSeek的技术开发的，也不明确“使用”是指通过API持续访问DeepSeek模型，还是仅指任何使用DeepSeek帮助编写代码的应用。
The US Department of Homeland Security on Monday issued an order directing federal civilian agencies not to use technology products from Chinese AI lab DeepSeek, and to remove any existing implementations. The order [PDF] is broad, as it requires agencies to ditch "all DeepSeek and DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." Complying will be tricky as it is not clear which third-party products and services have been developed using DeepSeek's wares. Nor is it clear whether "developed using" means providing ongoing access to DeepSeek models via API or simply refers to any app vibe-coded with the help of DeepSeek.
该命令还未对AI网关作出规定。OpenRouter和Vercel AI Gateway等服务通过API提供DeepSeek模型。使用这些网关服务的机构可能在不知情的情况下使用了DeepSeek模型。例如，OpenRouter“将请求路由到最适合的模型提供商”，选择其认为最匹配的AI服务提供商；Vercel AI Gateway默认也采用同样的方式。因此，若未对AI供应商加以限制，联邦民用机构可能会无意中使用DeepSeek模型。国土安全部发言人未立即回应置评请求。
It also leaves open the question of AI gateways. Services such as OpenRouter and Vercel AI Gateway make DeepSeek's models available through APIs. And those using gateway services may find themselves using DeepSeek models without meaning to do so. OpenRouter, for example, "routes requests to the best available providers for your model." It selects what the service deems to be the best fit provider of AI services. Vercel AI Gateway does the same by default. So federal civilian agencies could be using DeepSeek models inadvertently, if they haven't taken steps to constrain their AI providers. A DHS spokesperson did not immediately respond to a request for comment.
自2025年初中国AI实验室发布DeepSeek‑R1以来，美国官员一直在考虑对DeepSeek实施禁令。2025年2月6日，美国众议员达林·拉胡德（共和党‑伊利诺伊州）和乔什·戈特海默（民主党‑新泽西州）共同提出《政府设备禁用DeepSeek法案》。立法者将DeepSeek描述为国家安全威胁，称其AI模型可能收集美国公民数据并提供给中国政府。该法案未能通过委员会审议，但多家政府机构已自行执行。美国国防界和立法者已将DeepSeek逐出其系统。
US officials have contemplated a ban on DeepSeek since the China-based AI lab released DeepSeek-R1 in early 2025. On February 6, 2025, US Representative Darin LaHood (R-IL) and US Representative Josh Gottheimer (D-NJ) introduced the No DeepSeek on Government Devices Act. The lawmakers characterised DeepSeek as a national security threat because its AI models purportedly capture data on US citizens and provide it to the Chinese government. The bill never made it out of committee, but various government agencies followed through. The US Defense community and lawmakers have already exiled DeepSeek.
- 人名和地名一律使用汉字进行转写；品牌名称和产品名称可保持原样（即使用拉丁字母）。
The Defense Information Systems Agency (DISA) started blocking DeepSeek on the Pentagon’s IT networks in January 2025.
翻译内容： 2025年1月，美国国防信息系统局（DISA）开始在五角大楼的IT网络中屏蔽DeepSeek应用程序。美国海军、NASA以及美国众议院也采取了类似的措施，多个美国州政府也纷纷跟进。虽然美国国土安全部（DHS）的禁令迟迟未能传达给民用机构，但这一举措对那些希望尽快上市的美国人工智能公司（如Anthropic）来说可能是个好消息。
The US Navy, NASA, and the US House of Representatives took similar steps. So did various US states. While the DHS announcement has taken a long time to reach civilian agencies, its timing may be a boon for American AI companies which, like Anthropic, hope to soon go public. That's because open weight models represent competition, and those from China have proven particularly popular both in terms of capabilities and cost. Government agencies that cannot deploy such models (and the taxpayers who fund those agencies) may be stuck paying the prices set by favored US model makers.
因为开源的AI模型代表着竞争压力，而来自中国的AI模型在性能和成本方面尤为受欢迎。那些无法使用这些模型的政府机构（以及为这些机构提供资金的纳税人）可能不得不支付美国模型制造商制定的高价。
Concerns about the security and privacy of DeepSeek's iOS mobile app surfaced shortly after DeepSeek-R1 debuted. Several months later, a December 2025 report on the DeekSeek mobile app for Android and iOS cited similar concerns, including plaintext information leaks, links to servers run by Chinese tech firms, and shortcomings like lack of SSL pinning.
DeepSeek的iOS移动应用程序在发布后不久就引发了安全与隐私方面的担忧：该应用存在明文信息泄露的问题，其链接指向由中国科技公司运营的服务器，且缺乏SSL加密保护等安全机制。类似的问题在许多应用程序中都存在，尤其是那些集成来自美国境外公司的第三方广告SDK的应用程序。然而，这些问题主要属于移动应用的安全问题。
These issues, however, are mainly mobile security problems that afflict many apps, particularly those that integrate third-party advertising SDKs from companies based outside the US. They don't really address the additional risks posed by the capture of text prompts and responses, or how local secrets and other sensitive information can be ingested by AI agents.
Luta Security公司的创始人兼首席执行官Katie Moussouris在电子邮件中表示，虽然有合理的国家安全理由需要将DeepSeek的应用程序和服务器排除在政府系统之外，但该禁令的措辞过于严格、不切实际。“禁止DeepSeek自身的应用程序和API是可行的，”Moussouris指出，“真正的问题在于那些‘使用DeepSeek技术开发的第三方产品和服务’。但该禁令并未明确‘使用DeepSeek技术开发’的具体含义。”
Katie Moussouris, founder and CEO of Luta Security, told The in an email that while there are legitimate national security reasons to keep DeepSeek's app and servers away from government systems, the way this particular order is written exceeds that requirement in ways that aren't practical. "Banning DeepSeek's own app and API is workable," said Moussouris. "The problem is the ban on 'third-party products and services developed using DeepSeek implementations.' The order doesn't say what 'developed using' means.
从技术上讲，它可能涵盖任何基于DeepSeek衍生的模型，更重要的是，涵盖任何开发者曾使用DeepSeek编写或测试代码的软件。人工智能软件物料清单并不记录开发者使用了哪些工具，因此它实际上帮不上什么忙。每一家供应商都必须证明其所依赖的任何东西从未接触过DeepSeek。目前没有切实可行的方法来核实这一点。”
It could technically cover any model derived from DeepSeek and more importantly, any software whose developers used DeepSeek to write or test code. An AI software bill of materials doesn't record which tools developers used, so it would be no real help. Every vendor would have to attest that nothing it relies on ever touched DeepSeek. There's no practical way to verify that."
穆苏里斯还对这项行政令的覆盖范围提出异议，指出将规则适用于美国托管的DeepSeek模型版本做得太过头了。她说：“该行政令所列举的风险主要是关于数据流向DeepSeek在中国的服务器、其数据收集以及其应用。美国托管可以避免其中大部分风险。”“就模型本身而言，该行政令只说他可能包含恶意软件或漏洞，而这对所有软件来说都是如此。美国国家标准与技术研究院发现，DeepSeek比美国模型更容易受到提示注入攻击，尽管每个模型都有这个问题。美国国家标准与技术研究院还发现它更容易被越狱，但越狱防护措施往往会妨碍防御者。”®
Moussouris also took issue with the breadth of the order, noting that applying the rules to US-hosted versions of DeepSeek's models goes too far. "The risks the order cites are mostly about data flowing to DeepSeek's servers in China, its data collection, and its app," she said. "US hosting avoids most of those. "For the model itself, the order says only that it may contain malware or vulnerabilities, which is true of all software. NIST found DeepSeek more vulnerable to prompt injection than US models, though every model has that problem. NIST also found it easier to jailbreak, but jailbreak guardrails often get in the way of defenders." ®