Secure enclaves may still leak keys and weights through side channels or microscopy
geoffreyirving · x · 2026-07-25
In reply to the enclave idea, Irving says the main limitation is that the bulk of computation still happens unencrypted.
He warns that enclave-based systems may still be vulnerable to side channels like timing attacks and to physical attacks with advanced microscopy, which could expose keys or weights. In other words, enclaves help, but they are not a complete answer on their own.
Related event: Geoffrey Irving Outlines Three-Layer Approach to AI Treaty Verification(7 posts)→
More from Safety
- Anthropic's S-1 unusually discusses AI sentience and moral status risks — birchlse · 2026-10-27
- The most dangerous instruction you can give a superintelligent machine: lie to me — r0ck3t23 · 2026-10-27
- Rob Miles: AI employees recording audio logs as automated hacking takes off — Puzzleheaded-King584 · 2026-10-27
- Researcher Asks Whether Suspicious Model Behavior Can Ever Be Explained — or Faked — jd_pressman · 2026-10-27
- UK AISI papers: no good safeguards yet against misuse of biological AI tools — davidmanheim · 2026-10-27
- Washington's message to AI execs: Please shut up — TobyWalsh · 2026-10-27