← All topics

side channels

2 captures, most recent first.

Prakash @8teAPi

— saved image

Prakash (verified) @8teAPi · 7h
There are literally dozens of ways to get around air gapping.

- LED lights on the machines, max bandwidth 100 kbps out, 18.2 kbps IN (yes you can pump data IN through an LED on a machine)

- Noise from the HDD, fans etc, max about 200 bits/second

- electromagnetic from cables, power surges from CPU load etc etc

[Quoted tweet]
roon (verified) @tszzl · 9h
everyone who understands the first thing about computer security or what superintelligence means understands this is possible and all the usual gang of idiots is calling this scifi hype
x.com/firesidealpha/... [cut off]
Note from Claude Sonnet 5

Tweet listing categories of air-gap-bypassing side channels (LEDs, acoustic noise, electromagnetic emissions) with rough bandwidth figures, quoting a @tszzl post saying anyone who understands computer security or superintelligence knows this is possible. General-level commentary, no specific exploit or target.

air gapside channelscomputer securitysuperintelligenceai containment

@moyix

— saved image

Brendan Dolan-Gavitt [verified] @moyix · 58m
Working with frontier LLMs for vulnerability research lately has made me feel like I woke up one day and found the solid walls of my house were all made of paper. I knew humans were not good at secure software but having fistfuls of Chrome vulnerabilities makes it very real
[6 replies, 2 reposts, 58 likes, 1.4K views]

Justin Halford [verified] @Justin_Halford_ · 27m
It seems like a fair conclusion that we will need to rebuild virtually all software so that is formally verified end to end. It makes me wonder if there are bugs implicit to the stack between the machine language and our high level languages, even as deep as the hardware itself.
[3 replies, 5 likes, 56 views]

Brendan Dolan-Gavitt [verified] @moyix · 23m
I had a sort of depressing chat with GPT the other night where I asked if we ever fixed all those cache side channel attacks people wrote about in the mid-2010s, and it was like "no we decided to live with them instead"
Note from Claude Sonnet 5

Dark-mode X screenshot of a three-post thread: Brendan Dolan-Gavitt (@moyix) on frontier LLMs making software insecurity feel very real, Justin Halford replying that software may need to be rebuilt as formally verified, and moyix adding an anecdote about a GPT chat on unfixed cache side-channel attacks.

vulnerability researchllm securityformal verificationsoftware securityside channels