Researchers detail how a side channel can be used to read encrypted responses from AI assistants, except Google's Gemini; OpenAI and Cloudflare made mitigations
All non-Google chat GPTs affected by side channel that leaks responses sent to users. — AI assistants have been widely available …
Context & Ripple Effects
This report adds a transport-layer privacy problem to contemporaneous scrutiny of AI-assistant safeguards: earlier coverage found limited protections against election-disinformation generation in Gemini and ChatGPT. The distinction matters because this issue concerns the confidentiality of responses in transit rather than what a model is willing to generate.
Google's Gemini is the reported exception, while OpenAI and Cloudflare had already moved to mitigate exposure. That makes implementation choices around delivering assistant output—not only model behavior—a security differentiator.
First-order effects
- Users of affected non-Google chat assistants face potential exposure of responses despite encryption if the side channel is exploitable in their delivery path.
- OpenAI and Cloudflare must operate and validate their mitigations; Gemini's reported immunity gives Google a narrower immediate exposure on this specific issue.
Second-order effects
- AI-assistant providers and the infrastructure companies serving them will face pressure to review encrypted-response handling, especially where customers assume transport encryption alone protects output confidentiality.
- Security comparisons among assistant platforms will increasingly turn on the surrounding application and delivery stack, not just the model's safety controls.
Third-order effects
- If similar flaws recur, AI security evaluation is likely to broaden from model misuse and prompt defenses to end-to-end confidentiality across the systems that deliver model output.
- The episode points toward AI services being assessed as integrated applications: a strong model-level control may not offset weaknesses in network, browser, or infrastructure layers.
The trend: As AI assistants become routine interfaces, their security posture is increasingly determined by the full delivery stack as much as by the model itself.