Picture the most secure computer imaginable. It sits in a windowless room, disconnected from the internet, isolated from every network, guarded by biometric locks. Military secrets, nuclear facility controls, and cryptocurrency cold wallets all rely on this ancient security wisdom: if a machine touches nothing, nothing can touch it.
Yet researchers keep finding ways to whisper secrets out of these fortresses. Through inaudible hums from cooling fans, through subtle flickers in power consumption, through invisible radio waves leaking from cables. The air gap, long considered digital security's gold standard, is turning out to be surprisingly porous. Understanding how reveals something fascinating about the physical nature of computing itself.
Acoustic Channels: The Sound of Stolen Data
In 2013, security researcher Michael Hanspach demonstrated something unsettling. Two laptops, with no network connections between them, could exchange data using nothing but their built-in speakers and microphones. The trick? Transmitting information at frequencies above human hearing, around 20 kilohertz, riding on ultrasonic waves that sound like silence to us.
Since then, the acoustic toolkit has expanded remarkably. Researchers have coaxed data out of computers by modulating the whine of cooling fans, the click of hard drive heads, and even the subtle whistle of power supplies. Malware called Fansmitter can spin fans at specific speeds to encode binary data. DiskFiltration uses the mechanical movements inside hard drives as a Morse code of sorts.
The receiver doesn't need to be sophisticated either. A nearby smartphone, an unwitting employee's laptop, or a compromised smart speaker can pick up these acoustic signals from meters away. The computer that was supposed to be silent is actually broadcasting constantly, if you know how to listen.
TakeawayEvery physical component that moves, vibrates, or generates heat is a potential transmitter. Silence, in computing as in life, is often an illusion.
Power Analysis: The Electrical Fingerprint
Every calculation a processor performs consumes electricity in a slightly different pattern. Adding two numbers draws power differently than multiplying them. Encrypting data with one key looks different than encrypting it with another. To a sensitive enough meter, a computer's power consumption is a live confession of what it's doing.
This technique, called power analysis, has been used to extract encryption keys from smart cards, hardware wallets, and industrial controllers. Attackers have even shown they can read power signatures from an electrical outlet down the hall, or through the building's shared power lines, without physically touching the target machine.
The Israeli researcher Mordechai Guri has spent years cataloging these techniques. His PowerHammer attack demonstrated that malware could deliberately modulate a computer's power draw to transmit data through the building's electrical wiring, turning the very infrastructure that powers the machine into its exfiltration route. The wall itself becomes the wire.
TakeawayInformation leaks wherever energy flows. Every abstraction in computing eventually meets physics, and physics has no interest in your security policies.
Electromagnetic Leakage: Radio Ghosts
In 1985, Dutch researcher Wim van Eck published a paper showing that computer monitors emit radio waves that can be reconstructed into a readable image from across a street. The technique, now called Van Eck phreaking, revealed that screens are essentially low-power radio transmitters broadcasting their contents to anyone with the right antenna.
Modern flat-panel displays have reduced but not eliminated this leakage. Cables leak. Keyboards leak. USB ports leak. Recent research has shown that GPUs emit distinctive electromagnetic signatures based on the neural networks they're running, meaning an eavesdropper can identify what AI model a machine is using without seeing the screen.
Governments have known about this for decades. The classified TEMPEST standards, first developed by the NSA in the 1960s, specify shielding requirements for sensitive equipment. But shielding is expensive, and most organizations don't bother. The computers running your bank, your hospital, and your city's traffic lights are almost certainly whispering their secrets into the ether.
TakeawayThe line between information and physical phenomenon is thinner than we pretend. What looks like data on your screen is also electromagnetic radiation escaping into the world.
These attacks remain rare in practice. They require proximity, sophistication, and specific targets worth the effort. Your laptop isn't broadcasting your passwords to nearby strangers. But for the world's most sensitive systems, the assumption that isolation equals security is quietly crumbling.
The deeper lesson extends beyond cybersecurity. Every technology has physical shadows we don't see. Understanding those shadows, whether in computing, communication, or infrastructure, is becoming an essential literacy for navigating a world where the digital and physical are more entangled than ever.