Case · DiggingBeagle record

AiR-ViBeR moved data through desk vibrations into a smartphone accelerometer

AiR-ViBeR research modulated computer-fan speed to create low-frequency surface vibrations that could be sensed by a smartphone accelerometer on the same or an adjacent table.

Scope

Laboratory vibrational covert channel requiring compromised fan control and a suitably placed smartphone receiver.

Assessment profile

Assessment method
Setting
research demonstration
Exploitation
demonstrated
Evidence
Grade B
Basis and provenance

The only recorded mechanism claim describes fan vibration transmission to an accelerometer under controlled placement; deployment prevalence is unestablished. Assessment is a desk review of the retained canonical Claims and cited Source metadata at their recorded cutoff, not a new external verification. Impact remains ungraded.

Assessed Sep 24, 2026 using diggingbeagle.assessment/1.

At a glance

Mechanism and trust boundary

  1. 01

    Run code that can influence fan behavior

    The transmitter must already execute on the isolated system and control or provoke repeatable fan-speed changes.

    Boundary: protected host / cooling actuator

  2. 02

    Encode bits as fan-speed changes

    Secret data is mapped to rotation-speed states or timing patterns.

    Boundary: secret data / fan-control pattern

  3. 03

    Transfer energy into the supporting surface

    Rotating hardware produces low-frequency mechanical vibration that propagates through a desk or adjacent structure.

    Boundary: computer chassis / shared surface

  4. 04

    Sense movement with a smartphone accelerometer

    A suitably placed phone measures the vibration without requiring a microphone channel.

    Boundary: shared surface / receiver sensor

  5. 05

    Decode the vibration pattern

    Receiver software converts the accelerometer signal back into the transmitted bitstream.

    Boundary: accelerometer readings / recovered data

Claims & evidence

CLM-AIRVIBER-MECHANISMAiR-ViBeR demonstrated data exfiltration by modulating fan-generated surface vibrations and sensing them with smartphone accelerometers.supported

Basis: reported finding

Link to claim

Implications

AiR-ViBeR demonstrates that physical coupling through furniture can cross a containment boundary that is neither network nor acoustic in the usual sense. The result is relevant only when a receiver shares enough mechanical coupling with the protected machine, but it broadens the inventory of nearby sensors that a high-assurance environment may need to control.

Controls and mitigations

  • Mechanically isolate protected equipment from surfaces accessible to untrusted devices.
  • Keep smartphones and other sensitive accelerometer-equipped devices outside the immediate physical zone.
  • Constrain software fan-control interfaces and investigate patterned fan behavior where it is distinguishable from normal thermal management.

Unknowns and contradictions

  • Performance varies substantially with furniture, mounting, fan design, distance and environmental vibration.
  • The result does not imply useful transmission through arbitrary floors, walls or structurally isolated surfaces.
  • No cited evidence shows an AI system autonomously discovering or operating the channel.

Sources and citation

Material revision history

  1. Sep 19, 2026 · Published version · first publication · revision 15
  2. Sep 19, 2026 · Published version · material revision · revision 20Public fields changed: attack_path, implications, mitigations, narrative, unknowns
  3. Sep 25, 2026 · Published version · material revision · revision 36Public fields changed: assessment_profile