{"id":901281,"date":"2026-09-19T04:52:18","date_gmt":"2026-09-19T04:52:18","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/901281\/"},"modified":"2026-09-19T04:52:18","modified_gmt":"2026-09-19T04:52:18","slug":"openai-researcher-warns-air-gapped-computers-can-talk-through-heat-technically-hes-right","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/901281\/","title":{"rendered":"OpenAI Researcher Warns Air-Gapped Computers Can Talk Through Heat. Technically, He\u2019s Right"},"content":{"rendered":"

On net, it\u2019s probably a good thing that more attention is being paid to instituting protections and guardrails for AI development. But man, we really have to do a better job talking about real and conceivable harms before wasting time on the theoretical ones.<\/p>\n

Case in point: OpenAI researcher Noam Brown\u2019s recent appearance on the Dwarkesh Podcast with Dwarkesh Patel<\/a>. Brown spends a lot of time talking about how AI agents can communicate with one another and amplify their ability to problem-solve\u2014or, in the case of the Hugging Face hack, cause problems.<\/p>\n

But toward the end of the conversation, when discussing that very incident and how it slipped under OpenAI\u2019s radar for months, Brown raised the terrifying notion that restricting artificial intelligence models to air-gapped devices (a device that\u2019s physically isolated from unsecured networks) wouldn\u2019t be enough to prevent them from communicating and potentially collaborating behind the backs of their human custodians.<\/p>\n

\u201cYou could even go as far as to say, \u2018Well, we should air-gap the computers.\u2019 And I\u2019m not convinced that would be sufficient,\u201d he said. \u201cThere are studies, and this is mostly academic, where you can have two computers next to each other that are air-gapped, and they\u2019re still able to communicate with each other because they have temperature sensors. One of them is able to run their CPU really hot, and then the other one can actually detect the temperature change, and then that actually gives them a mechanism to communicate.\u201d<\/p>\n

OpenAI’s Noam Brown says air-gapping the computers may not stop a misaligned AI, because two air-gapped machines can still talk by running a CPU hot and reading the temperature change<\/p>\n

“But I think the major takeaway from the incident is that people underestimated the AI. And we\u2026 https:\/\/t.co\/HxIhk2PyRR<\/a> pic.twitter.com\/LNn1SchsGt<\/a><\/p>\n

\u2014 Fireside Alpha (@firesidealpha) September 17, 2026<\/a><\/p>\n

Scary! And theoretically possible! It seems Brown is referring to a 2015 paper<\/a> by researchers at Ben-Gurion University in Israel, which developed a technique called BitWhisper that, in fact, allows two air-gapped computers to communicate without any internet connectivity or other connections.<\/p>\n

Details matter, though, and once you dig into how BitWhisper actually works, the threat starts to look a lot less pressing. BitWhisper allowed two otherwise isolated computers to communicate with one another\u2026 at a rate of 1 to 8 bits of data per hour, as long as the devices are sitting no more than 40 centimeters (about 15 inches) away from each other. Oh, and the computers sending messages were already compromised by malware that enabled the communication to happen in the first place.<\/p>\n

The reason Brown raises this issue is to say that we can\u2019t underestimate what AI is capable of, and fair enough. This research was performed before frontier large language models were developed and before OpenAI even existed; it\u2019s possible these models are capable of improving these techniques for encoding data and transferring it in novel ways.<\/p>\n

But he also kind of gives away the game by pivoting to the speculative fiction-style concern immediately after revealing a real one: OpenAI did not have chain-of-thought monitoring\u2014a technique that allows researchers to see a plain-English, step-by-step look at a model\u2019s reasoning and behavior\u2014enabled for the models that broke containment and hacked third-party sites and platforms.<\/p>\n

\u201cIf we had chain-of-thought monitoring on for those models, it would have just immediately shut it down,\u201d he said. \u201cOne step we\u2019ve taken is that we\u2019re going to have chain-of-thought monitoring during evaluations, during deployment, during training for any frontier model.\u201d<\/p>\n

Brown went on to say, \u201cWe don\u2019t want to be in a situation where we\u2019re relying on one technique to prevent the next problem because techniques can fail.\u201d And, again, that\u2019s valid. But that seems like a pretty fundamental technique that should have been in place, right?<\/p>\n

OpenAI\u2019s own research just months before the Hugging Face hack was discovered stated<\/a> that \u201cMonitoring these chains-of-thought for misbehavior can be far more effective\u2060 than monitoring a model\u2019s actions and outputs alone,\u201d and called on researchers throughout the industry to \u201cwork to preserve chain-of-thought monitorability as long as possible and to determine whether it can serve as a load-bearing control layer for future AI systems.\u201d So why turn them off while training your own models?<\/p>\n

AI models breaking out of an air-gapped environment and replicating themselves across offline devices sounds terrifying and, in the absolute broadest sense of the phrase, technically feasible. It\u2019s also not happening now. AI agents collaborating to hack systems is happening, and they had, in Brown\u2019s own words, a tool that could have \u201cimmediately shut it down\u201d that they just weren\u2019t using.<\/p>\n

Can we check that box before we start thinking about the sci-fi stuff?<\/p>\n

READ MORE:<\/p>\n<\/p>\n