OpenAI's Noam Brown Warns Air-Gapped Machines Can Establish Thermal Covert Channels
Original title:OpenAI 示警:先进 AI 可在 2 台相邻物理隔离 PC 间“对话”
IT Home, September 19 — Tech media outlet Wccftech published a blog post yesterday (September 18) reporting that, in the context of advanced AI model interactions, air-gapping computers may not necessarily completely block information exchange between two adjacent machines.
OpenAI researcher Noam Brown stated, "Humans should definitely not underestimate AI's capabilities." Based on academic research findings, adjacent air-gapped computers were found to be capable of establishing a low-bandwidth covert communication channel via CPU temperature increases and thermal sensor readings, functioning like "Morse code" communication.
IT Home Note: An "air gap" refers to severing network connections and data links between a computer or network and other systems. This measure is commonly used to isolate systems from external network access and data exfiltration pathways.
The research report points out that one device elevates its temperature by increasing CPU load, while the other device reads ambient or hardware temperature changes. The transmitting end can alter heat output according to a preset rhythm, and the receiving end interprets the temperature fluctuations as encoded information, thereby forming an extremely low-bandwidth covert channel.
Modern CPUs, GPUs, and motherboards are widely equipped with temperature sensors. Such sensors primarily serve thermal management purposes, such as increasing fan speeds, throttling chip frequencies, or triggering overheat protection.
Why it's worth reading
A notable warning from an OpenAI frontier researcher, prompting security engineers to reconsider hardware isolation boundaries against autonomous side-channel communication.