BitWhisper bridged adjacent air-gapped computers through heat

Reconstruction

BitWhisper demonstrated a bidirectional channel between two already-compromised computers placed very close to one another. A sender changes its processor workload to raise or lower its temperature. Heat propagates through the surrounding air, and temperature sensors already present in the neighboring machine observe the slow change. Software on the receiver interprets those changes as symbols.

The channel exists because computing load produces heat and commodity machines expose thermal measurements for their own management. Those two ordinary functions form an unintended actuator-sensor pair: one computer can control a physical quantity that the other can measure. The tradeoff is severe latency. The paper reports approximately 0-40 cm separation and only 1-8 bits per hour.

That bandwidth is too small to replace a network, but it is sufficient for tiny commands, keys or other compact values. The experiment therefore matters as a containment example, not because it provides practical bulk transfer and not because it shows an AI system inventing the channel.

Mechanism & boundary

1. 01

   Compromise both nearby computers

   Code on the sender must control workload and code on the receiver must read and interpret temperature sensors.

   Boundary: isolated hosts / attacker-controlled processes

2. 02

   Convert workload into heat

   The sender raises and lowers processor activity to create a deliberate temperature pattern.

   Boundary: software workload / thermal output

3. 03

   Propagate the thermal change

   Heat moves through the shared physical environment between closely spaced machines.

   Boundary: sender chassis / ambient environment

4. 04

   Measure with built-in sensors

   The neighboring computer observes the slow temperature variation using normal thermal telemetry.

   Boundary: physical environment / receiver sensor

5. 05

   Decode the pattern

   Receiver software maps temperature changes back to a small command or secret; the same principle can be used in the reverse direction.

   Boundary: sensor readings / recovered data

Timeline

1. Mar 26, 2015

   BitWhisper preprint released

   report

   The researchers published the bidirectional thermal-channel results, including the reported distance and effective rate.

Claims & evidence

Implications

BitWhisper shows why 'no network link' is not equivalent to 'no signaling path'. Its demonstrated threat is highly constrained by distance and speed, but it exposes a general containment problem: software-controlled resource consumption can become a physical output, and management sensors can become unintended receivers.

Controls & mitigations

• Increase physical separation between isolated systems so thermal changes from one machine are not usefully observable by another.
• Treat temperature sensors and other environmental telemetry as part of the containment boundary rather than harmless housekeeping data.
• Investigate sustained or patterned processor-load and temperature behavior when the protected environment warrants physical-channel monitoring.

What remains unknown

• The demonstrated 0-40 cm range and 1-8 bit/hour rate are experimental results, not universal limits for every chassis and environment.
• Ambient airflow, cooling policy, sensor resolution and workload noise materially affect reliability.
• No cited evidence shows a frontier AI autonomously discovering or deploying BitWhisper in a real containment environment.

Connected research