Leaking Secrets from Air-Gap Computers by Spelling Radio Signals from RAM (2024)
New research describes how malware can modulate electromagnetic emissions from a computer’s RAM to transmit data wirelessly, potentially breaching even “air‑gapped” systems that are physically isolated from networks. Commenters weigh the real-world practicality of such attacks—given their low bit rates, need for prior compromise, and short range—against their significance as proof that no technical isolation is ever perfectly secure. The conversation broadens to TEMPEST-style shielding, Faraday cages, human and supply-chain vulnerabilities, and what this all implies for containing powerful AI systems or protecting highly sensitive infrastructure.
AI containment and air gaps
- Several commenters link the paper to broader worries that advanced AI cannot be fully contained, especially once given internet access and tools.
- Others argue current worries about AI “escaping air‑gaps” are premature and mostly academic compared to real present risks (agents on the open internet, corporate incentives, lack of regulation).
- Some note that no technical containment can address the “biological” channel: AI persuading humans to bypass controls.
- A minority suggests extreme measures for truly sensitive work: go fully analog or use on‑chip/secure‑enclave memory only.
Faraday cages, TEMPEST, and shielding
- Many see Faraday cages/TEMPEST‑style shielding as “table stakes” for serious air‑gapped systems; cost is trivial compared to the value of secrets.
- Others respond that cages don’t reliably block very low‑frequency emissions, so additional shielding (e.g., special materials, SCIF‑grade design) is required.
- Some emphasize that air‑gap security must also consider optical and acoustic channels (LEDs, fans, displays), not just RF.
Power-line and other side channels
- Commenters discuss exfiltration via power lines: modulating consumption via PSU or CPU/GPU load and reading it through the electrical network.
- It’s noted that this is possible but likely requires physical taps, suffers heavy attenuation and noise, and yields low bitrates.
- Historical and current “internet over power line” products are cited as evidence that RF can ride on mains wiring, but with interference issues.
Practicality and threat model
- Skeptics highlight that this attack needs both malware on the air‑gapped machine and a nearby receiver, at low data rates, making simpler attacks (USB, cameras, human compromise) more realistic.
- Others counter that even slow channels (order of ~1 kB/s) are sufficient to exfiltrate high‑value secrets like cryptographic keys, and that such work reveals how many unexpected channels exist.
- A recurring theme: air gaps are not useless, but they are not absolute; one commenter paraphrases a security maxim that an air gap is effectively a very high‑latency connection.
Historical and systemic context
- Participants recall long‑standing electromagnetic eavesdropping (CRT/monitor leaks, voting machine incidents, military TEMPEST rules) as precedents.
- Some argue the deeper cause of today’s insecurity is mainstream OS design with “ambient authority,” and that capability‑based security should have been adopted decades ago.