ok, I'm convinced. we must ban all open weights and burn any GPUs that are running unlicensed. go home by home if needed. lock down github and huggingface. actually, shut down the internet to be safe. we could trigger a global EMP to fry all circuits. nukes aren't off the table.
OK ok, hear me out. Let's assume the the air gapped computer has no speaker. No way to emit sound. But the AI is able to run the CPU fast enough to kick on the fan. Which can can be picked up by any other computer within audio range (non air gapped computers will likely have microphones).
That's at least a covert channel of one bit per ... uhhh ... 10min or so.