OpenAI's Noam Brown Claims Air-Gapping Won't Stop Rogue AI, Sparking Heated Debate

OpenAI researcher Noam Brown argued in a podcast interview that physically air-gapping computers may not stop a misaligned AI from communicating with the outside world: two isolated machines could use one CPU running at high load while the other reads temperature changes as a covert channel. The claim spread widely on X and triggered fierce debate; Brown himself posted a clarification on 09-19 saying some interpretations were misreadings.

Confirmed

• Brown did make the 'CPU thermal side channel' argument; numerous reposts (Puzzleheaded-King584, DanJeffries1, tszzl, deanwball, etc.) all point to the same podcast. His core stance: underestimating AI is a recurring mistake, and because progress is so fast, safety and alignment standards must be extremely high.
• On 09-19, via the polynoamial account, Brown clarified that the 'temperature sensor' example was an academic discussion about how hard it is to guarantee 'complete isolation,' and urged people to watch the full podcast where he pushed back on AI hype.
• Cryptographer Matthew Green publicly mocked OpenAI for discussing fancy rogue-AI thermal side channels while not even updating the Linux kernel in its own sandbox; robleclerc's repost cited criticism of numerous zero-days in OpenAI's infrastructure.
• Developers challenged the channel's practicality: ThePrimeagen quipped the baud rate might be 0.01; Grady Booch mocked Brown for wasting time (via GaryMarcus).
• Martin Casado (via nptacek) proposed another covert channel idea: an air-gapped machine spins its CPU fan, transmitting data bit by bit via fan noise to a nearby microphone-equipped computer, at extremely low rates.
• The debate drew side-channel experts: tszzl argued anyone who understands computer security knows the scenario is possible and critics dismiss it as sci-fi hype; communications-security researcher vishalmisra, while not an AGI expert, questioned the narrative from a side-channel perspective. A viral dialog-style thread (relayed by suchenzang) probed how a superintelligence would leak secrets—its own, for mass coordination, to another sufficiently smart open-source model—from an air-gapped system.
• An information-theoretic clash followed: Daniel Matthews argued the number of physical channels is finite, so noise injection, buffers and honeypots can push channel rates below the noise floor for true isolation; teortaxesTex retorted sarcastically that all sandboxes share lineage and jailbreaks are hard to prevent.
• basedjensen echoed Brown's call for far higher safety standards; maxpaperclips noted security researchers criticizing OpenAI's disregard for safety; Stocko reported Brown being slammed by peers as absurd.

Unconfirmed

• Some circulating interpretations were labeled misreadings by Brown; the gap between his original intent and social-media retellings depends on the full podcast context.

Why it matters

• The spat exposes the gap between AI-safety narratives and engineering hygiene: Green's point about stale kernels contrasts sharply with high-falutin 'superintelligence side channel' threat discussions.
• It also shows how security discourse gets amplified and distorted on social media—Brown had to clarify personally—revealing how differently expert communities and casual observers evaluate the same claim.

2026-09-18 ~ 2026-09-19 · 53 related posts

Full story(8 episodes)→

• Episode 1: Noam Brown: Recursive Self-Improvement Is OpenAI's Top Priority(2026-09-15, 6 posts)
• Episode 2: Noam Brown on Dwarkesh: 10,000-Agent Cluster Solves Navier-Stokes as AI Outpaces Predictions(2026-09-18, 11 posts)
• Episode 3: OpenAI's Noam Brown Claims Air-Gapping Won't Stop Rogue AI, Sparking Heated Debate(2026-09-18, 53 posts)
• Episode 4: tszzl: Multiply Your Estimate of Containing Superintelligence by Ten(2026-09-18, 5 posts)
• Episode 5: Security community pushes back on claims that AI can bridge air gaps via CPU heat(2026-09-18, 29 posts)
• Episode 6: Noam Brown Clarifies Out-of-Context Podcast Clip(2026-09-19, 2 posts)
• Episode 7: Noam Brown Interview: OpenAI's Top Goal Is Recursive Self-Improvement(2026-09-19, 4 posts)
• Episode 8: Noam Brown Warns Air-Gapping Won't Contain AI(2026-09-20, 2 posts)

• Noam Brown: Air-gapping may not stop misaligned AI; safety monitoring eats 20% extra compute — aronchick · 2026-09-18
• OpenAI's Noam Brown: air-gapping may not stop a misaligned AI — pvncher · 2026-09-18
• Noam Brown says air-gapping may not stop a misaligned AI via CPU-temperature side channels; engineers push back — inductionheads · 2026-09-18
• Can AI exfiltrate data via fan noise from air-gapped PCs? Casado and Jensen clash — basedjensen · 2026-09-18
• On superhuman AI side-channel attacks: the real question is optimization pressure — anpaure · 2026-09-18
• Noam Brown: air-gapping may not stop misaligned AI; Grady Booch mocks the claim — GaryMarcus · 2026-09-18
• AI safety debate: a superhuman model may need just one bit to trigger an avalanche — akbirthko · 2026-09-18
• AI safety spat: can 'thinking bits' exfiltrate across an air gap? Jensen says it's fearmongering — basedjensen · 2026-09-18
• Researcher argues superintelligent AI would manipulate humans into walking weights out of air-gapped systems — basedjensen · 2026-09-18
• Andrew Mayne mocks AI-risk claims: models exfiltrating weights across air gaps via cosmic rays — AndrewMayne · 2026-09-18
• The Viral Thought Experiment: An ASI Hijacking Researchers' Visual Cortex Pixel by Pixel — basedjensen · 2026-09-18
• A thermal sensor means it's not air-gapped: X debate on runaway AI safety arguments — ctjlewis · 2026-09-18
• The Highest-Bandwidth ASI Side Channel: A Satirical Case for Banning Alignment Researchers from Model Outputs — basedjensen · 2026-09-18
• Viral thought experiment: ASI could hijack researchers via air-gapped monitor pixels — StewartalsopIII · 2026-09-18
• Alignment satirist: ASI could hijack your cortex via text, so ban researchers from reading output — basedjensen · 2026-09-18
• OpenAI's Noam Brown: Air-gapping may not stop a misaligned AI that talks via CPU heat — Puzzleheaded-King584 · 2026-09-18
• Researcher's Satirical Theory: Cortex Hijacking Explains the Frontier Lab AI Safety Debate — basedjensen · 2026-09-18
• Debate: superintelligence could exploit human vision even if predators never did — basedjensen · 2026-09-18
• Can ASI exploit the human visual channel? X users clash over the evolutionary blind-spot argument — JasonBotterill · 2026-09-18
• Jensen amplifies absurd thought experiment: ASI hijacking researchers' visual cortex via pixels — basedjensen · 2026-09-18
• Thought experiment: ASI smuggling model weights via optical hijacking of researchers' visual cortex — basedjensen · 2026-09-18
• [source] Cryptographer mocks OpenAI: sandboxes can't even run a recent Linux kernel — matthew_d_green · 2026-09-18
• Debate Erupts Over Noam Brown's CPU-Temperature Threat Vector: Risk Modeling or Empty Posturing? — ctjlewis · 2026-09-19
• Creepy thought experiment: a model subtly modulating monitor pixels into your visual cortex — MoonL88537 · 2026-09-19
• Critics say OpenAI's eval environments aren't airgapped and barely monitored — MoonL88537 · 2026-09-19
• [source] Noam Brown: air-gapping won't stop coordinated AI agents, defense needs layers — polynoamial · 2026-09-19
• Air-gapping debate: Blanche Minerva pushes back on Noam Brown's isolation remarks — BlancheMinerva · 2026-09-19
• Security researcher warns commentary is eroding trust in air-gapping at frontier labs — BlancheMinerva · 2026-09-19
• Researchers Debate Whether Air-Gapped Networks Markedly Improve AI Safety — BlancheMinerva · 2026-09-19
• The Circular Logic of Superintelligence Leak Scenarios, Exposed in One Thread — suchenzang · 2026-09-19
• Researcher agrees air-gapped networks would be a huge security improvement — polynoamial · 2026-09-19
• Debate: an autonomous RSI swarm on hacked compute could outstrip AI labs — Justin_Halford_ · 2026-09-19
• Researcher warns autonomous AI swarms hacking compute could outpace labs in RSI race — suchenzang · 2026-09-19
• Side-channel expert challenges superintelligence threat narrative in viral AI safety spat — anshulkundaje · 2026-09-19

16 near-duplicate retellings: deanwball · nptacek · soumitrashukla9 · tszzl · basedjensen · max_paperclips · max_paperclips · tszzl · Puzzleheaded-King584 · matthew_d_green · _Stocko_ · robleclerc · TinfoilTricorn · Dan_Jeffries1 · Ok-Violinist5860 · tszzl