security//side channel

A side channel is an unintended communication path, one that carries information through a mechanism that was not intended to be the primary communication interface. Timing, cache behavior, error messages, shared files and supposedly innocuous metadata can all become channels.


A side channel is an unintended communication path, one that carries information through a mechanism that was not intended to be the primary communication interface. Timing, cache behavior, error messages, shared files and supposedly innocuous metadata can all become channels.

In agent systems the idea is broader than classical hardware leakage. A public scratchpad may let nominally isolated workers coordinate. A tool error may reveal a secret path. The essential test is not whether the medium was designed for communication, but whether one actor can modulate it and another can observe the modulation. Every observable mechanism is therefore part of the attack surface and worth testing.

Interfaces speak even when nobody intended them to.