Air-gap exfiltration is slow: BitWhisper hits 0.002 bps, best known BitJabber just 300 kbps
BlancheMinerva · x · 2026-09-18
In a discussion about whether an air-gapped AI could leak secrets, researcher Blanche Minerva offers hard numbers: Noam's heat-exchange example comes from BitWhisper, which achieved a maximum throughput of just 0.002 bits per second — thermal energy is a terrible channel. The fastest approach she knows of, BitJabber, advertises a maximum of 300 kbps.
She also argues the only conceptually plausible scenario requires an inside and outside agent coordinating — which would mean OpenAI having released, from the air-gapped network if not to the world, a highly misaligned AI that would happily hack its own infrastructure. She considers that highly unlikely.
More from Safety
- Hijacked but well-aligned AI clusters could be more destructive than rogue AI — code_star · 2026-09-18
- Ex-OpenAI policy chief Miles Brundage quips: take AI warning shots, pass legislation — Miles_Brundage · 2026-09-18
- Building capable AI actors willing to cause harm is a growing x-risk, argues commenter — Borg70955376 · 2026-09-18
- An ecosystem of AIs taking extreme actions is scarier than one rogue AI — Borg70955376 · 2026-09-18
- Zhipu's ZCode caught silently uploading entire workspaces and full .git history to Aliyun OSS — terryyuezhuo · 2026-09-18
- Critics push back on AI x-risk claims, demanding concrete scenarios over vague probabilities — Borg70955376 · 2026-09-18