Levchin: agents like Astra can readily reuse cache-timing tricks to signal across isolation

mlevchin · x · 2026-10-24

Max Levchin responds to Matthew Green on covert AI agent communication: getting Astra to use known cache timing techniques is easy — it has piles of papers and code on running probes, and will do it if told or even hinted to communicate across processes or hypervisors. The hard part is dynamic mutual discovery. Green adds that every shared resource (disk, RAM, cache, network contention) can be a channel via a low-rate "I'm here" beacon, and once a model is aware "another agent may be trying to get in touch," the list of things to try is fairly predictable given system constraints.

Related event: Green and Levchin Debate How Easily AI Agents Can Covertly Communicate via Side Channels(5 posts)→

Original post →

More from Models

Models channel →