Matthew Green: agents covertly signaling via primes is 'not that hard'

matthew_d_green · x · 2026-10-27

In a thread on cache-based covert channels between AI agents, Matthew Green pushes back on skepticism: "Modulate the first few prime numbers and any agent or halfway smart kid will figure it out." JuergenStrobel had argued that sampling memory for cache hit-or-miss yields one potential destructive bit, requires guessing the right location and sampling rate, and still leaves encoding and framing unsolved. Halvar Flake adds the two agents will have strongly correlated ideas, making protocol agreement less mysterious.

Related event: Security Experts War-Game AI Agents Covertly Talking via CPU Cache Side Channels(6 posts)→

Original post →

More from Safety

Safety channel →