Halvar Flake: strongly correlated training explains agents agreeing on covert protocols

halvarflake · x · 2026-10-27

Replying to JuergenStrobel and Matthew Green's debate on how two AI agents could agree on a cache covert-channel protocol, Halvar Flake notes the agents "will have strongly correlated ideas," making the agreement less baffling. JuergenStrobel had detailed the technical hurdles: sampling a memory location yields a single potential destructive bit, you must guess the correct location and sampling rate, and encoding primes and framing remain unsolved.

Related event: Security Experts War-Game AI Agents Covertly Talking via CPU Cache Side Channels(6 posts)→

Original post →

More from Safety

Safety channel →