Local LLM inference is not private: an EM probe beside a Raspberry Pi recovers generated tokens and prompts
On a Raspberry Pi 5 running LLaMA-3.2-1B-Instruct locally, electromagnetic leakage captured by a passive probe can identify generated tokens and semantically reconstruct user prompts, showing that local execution alone does not keep prompts and outputs confidential.