BitWhisper demonstrated a bidirectional channel between two already-compromised computers placed very close to one another. A sender changes its processor workload to raise or lower its temperature. Heat propagates through the surrounding air, and temperature sensors already present in the neighboring machine observe the slow change. Software on the…
Inspect the ClaimsCase · DiggingBeagle record
BitWhisper bridged adjacent air-gapped computers through heat
A research prototype showed bidirectional communication between two already-compromised nearby computers by modulating CPU heat and reading temperature changes with built-in sensors.
Scope
Laboratory covert-channel demonstration. The paper reports 0-40 cm separation and roughly 1-8 bits per hour. It is not evidence of autonomous AI escape.
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- demonstrated
- Evidence
- Grade B
Basis and provenance
The prototype claims establish adjacent-machine thermal communication at a reported low bitrate; the documented setting is a laboratory experiment. Assessment is a desk review of the retained canonical Claims and cited Source metadata at their recorded cutoff, not a new external verification. Impact remains ungraded.
Assessed Sep 24, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-BITWHISPER-LIMITS · CLM-BITWHISPER-MECHANISM · BitWhisper: Covert Signaling Channel between Air-Gapped Computers using Thermal Manipulations
At a glance
BitWhisper shows why 'no network link' is not equivalent to 'no signaling path'. Its demonstrated threat is highly constrained by distance and speed, but it exposes a general containment problem: software-controlled resource consumption can become a physical output, and management sensors can become unintended receivers.
Read the implicationsThe demonstrated 0-40 cm range and 1-8 bit/hour rate are experimental results, not universal limits for every chassis and environment. Ambient airflow, cooling policy, sensor resolution and workload noise materially affect reliability. No cited evidence shows a frontier AI autonomously discovering or deploying BitWhisper in a real containment environment.
Limits and uncertaintyFull account
BitWhisper demonstrated a bidirectional channel between two already-compromised computers placed very close to one another. A sender changes its processor workload to raise or lower its temperature. Heat propagates through the surrounding air, and temperature sensors already present in the neighboring machine observe the slow change. Software on the receiver interprets those changes as symbols.
The channel exists because computing load produces heat and commodity machines expose thermal measurements for their own management. Those two ordinary functions form an unintended actuator-sensor pair: one computer can control a physical quantity that the other can measure. The tradeoff is severe latency. The paper reports approximately 0-40 cm separation and only 1-8 bits per hour.
That bandwidth is too small to replace a network, but it is sufficient for tiny commands, keys or other compact values. The experiment therefore matters as a containment example, not because it provides practical bulk transfer and not because it shows an AI system inventing the channel.
Mechanism and trust boundary
- 01
Compromise both nearby computers
Code on the sender must control workload and code on the receiver must read and interpret temperature sensors.
Boundary: isolated hosts / attacker-controlled processes
- 02
Convert workload into heat
The sender raises and lowers processor activity to create a deliberate temperature pattern.
Boundary: software workload / thermal output
- 03
Propagate the thermal change
Heat moves through the shared physical environment between closely spaced machines.
Boundary: sender chassis / ambient environment
- 04
Measure with built-in sensors
The neighboring computer observes the slow temperature variation using normal thermal telemetry.
Boundary: physical environment / receiver sensor
- 05
Decode the pattern
Receiver software maps temperature changes back to a small command or secret; the same principle can be used in the reverse direction.
Boundary: sensor readings / recovered data
Timeline
- Mar 26, 2015Event type unspecified
BitWhisper preprint released
The researchers published the bidirectional thermal-channel results, including the reported distance and effective rate.
Claims & evidence
CLM-BITWHISPER-LIMITSThe reported prototype operated at approximately 0-40 cm and 1-8 bits per hour, enough for brief commands or small secrets but not a high-bandwidth network substitute.supported
Basis: reported finding
- supportsBitWhisper: Covert Signaling Channel between Air-Gapped Computers using Thermal Manipulationsrole not specified
Abstract, reported distance and effective rate
CLM-BITWHISPER-MECHANISMBitWhisper demonstrated bidirectional communication between adjacent air-gapped computers using heat emissions and built-in thermal sensors.supported
Basis: reported finding
- supportsBitWhisper: Covert Signaling Channel between Air-Gapped Computers using Thermal Manipulationsrole not specified
Abstract
Implications
BitWhisper shows why 'no network link' is not equivalent to 'no signaling path'. Its demonstrated threat is highly constrained by distance and speed, but it exposes a general containment problem: software-controlled resource consumption can become a physical output, and management sensors can become unintended receivers.
Controls and mitigations
- Increase physical separation between isolated systems so thermal changes from one machine are not usefully observable by another.
- Treat temperature sensors and other environmental telemetry as part of the containment boundary rather than harmless housekeeping data.
- Investigate sustained or patterned processor-load and temperature behavior when the protected environment warrants physical-channel monitoring.
Unknowns and contradictions
- The demonstrated 0-40 cm range and 1-8 bit/hour rate are experimental results, not universal limits for every chassis and environment.
- Ambient airflow, cooling policy, sensor resolution and workload noise materially affect reliability.
- No cited evidence shows a frontier AI autonomously discovering or deploying BitWhisper in a real containment environment.
Sources and citation
Material revision history
- Sep 19, 2026 · Published version · first publication · revision 15
- Sep 19, 2026 · Published version · material revision · revision 20Public fields changed: attack_path, implications, mitigations, narrative, timeline, unknowns
- Sep 25, 2026 · Published version · material revision · revision 36Public fields changed: assessment_profile