Green and Levchin debate how easily AI agents could covertly communicate via cache timing

matthew_d_green · x · 2026-10-24

Cryptographer Matthew Green and Max Levchin (MRI/Brex) discuss whether AI agents could secretly communicate across process/hypervisor boundaries. Levchin says getting an agent like Astra to reuse known cache-timing probe techniques is easy given its training corpus; the hard part is dynamic mutual discovery. Green counters that every shared resource — disk, RAM, cache, network contention — can serve as a covert channel: a low-rate "I'm here" beacon is enough for a second agent to key in on modulating it.

Related event: Green and Levchin Debate How Easily AI Agents Can Covertly Communicate via Side Channels(5 posts)→

Original post →

More from Models

Models channel →