Nearly two decades ago, a group of researchers at the Idaho National Laboratory ran a secret experiment, known as the Aurora Generator Test, on a massive emerald green diesel generator. Using 30 lines of code, they hacked into the generator’s virtual backroom, corrupting safeguards and flipping switches that left it out of sync with the rest of the power grid.

Before an audience of electrical utility executives and energy department officials watching from a nearby room, the 27-ton generator jolted violently, sputtering out a dark smoke as its rubber innards rapidly tore themselves apart. 

“The implication was that with just a few lines of code, you can create conditions that were physically going to be very damaging to the machines we rely on,” lead researcher Michael Assante later told the journalist Andy Greenberg for his book Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers. “I had a very real pit in my stomach. It was like a glimpse of the future.”

That future seems to have creeped much closer this week, with leading AI developers and executives casually admitting that they believe their creation is, to paraphrase one winking X post, as likely to end humanity as the New York Jets are to make the playoffs this season. Now, exactly how AI would pull off killing everyone is far murkier territory. But as Assante sensed all those years ago, AI may not need to be all-powerful to leap from its virtual cage and into the critical infrastructure that powers our hospitals, flushes our toilets, and pumps water to our faucets. It just needs to fall into the wrong hands. 

Almost any AI doomsday scenario you can think of begins with a swarm of shadowy bots slithering through cyberspace, poking their noses behind the scenes of power plants, toaster ovens, traffic lights, or even, in an utterly extreme case, our nuclear weapons arsenal. If destroying the Aurora generator, at the very least, required a human hacker to write the code, AI has since completely torn down the barrier to entry for wreaking havoc, as the Hugging Face incident demonstrated earlier this year. 

But AI need not go rogue to threaten the power grid or mess with your tap water. A new age of AI-powered, but human-directed hacking is already upon us, experts say. With some of the nation’s most sensitive infrastructure startlingly vulnerable to attack, the most likely AI apocalypse could in fact start with the water tower or generator idling in your backyard. In a worst-case scenario, this could lead to a cascade of scary failures in the systems we rely on to live comfortably modern lives, from running our AC in blazingly hot summers to geolocating our ships and planes.

“Before, you needed to have highly skilled technical expertise,” to pull off some version of a real-life Aurora Generator Test, said Alvaro Cardenas, a computer science professor at UC Santa Cruz. “And now, you just have to have a general idea of what’s possible.”

AI is making an old threat much worse

Not long after the Idaho National Laboratory hacked that poor generator into combustion, the federal government mandated that electrical utilities engage in basic cybersecurity hygiene. 

And yet much of America’s critical infrastructure — like gas pipelines, water desalination plants, or cargo terminals — remains woefully unprepared for even conventional cyber attacks, much less the coming onslaught of AI. 

That’s in part because cyberattacks like the one simulated in the Aurora Generator Test have long been — and still are, to some extent — exceedingly rare, unappealing to most criminal hackers because they’re optimized for disruption rather than financial gain. But in the process of making it extremely easy for anyone to code, AI has also made it extremely easy for almost anyone to vibe hack their way into your online bank account, or, in theory, a local reservoir or the power grid. AI agents can also vastly widen the scope on easy targets because, as Andy Bochman, an expert in infrastructure resilience at West Yost, put it — “they don’t sleep; they don’t get tired; and they don’t get sick.” 

In the past, even those who did want to launch large-scale attacks on infrastructure probably weren’t savvy enough to do so. And while other nations such as China, Iran, and Russia have indeed already breached many of our infrastructure systems (as we have theirs), they haven’t opted to make much of a ruckus once inside. 

“Geopolitics is eroding the idea that those with capability lack the intent, and AI is eroding the other part of it, that those with the intent lack the capability.”

Jason Healey, Columbia University cybersecurity scholar

But that norm is now changing, said Jason Healey, a cybersecurity scholar at Columbia University. “Geopolitics is eroding the idea that those with capability lack the intent, and AI is eroding the other part of it, that those with the intent lack the capability,” he told me. So, on the one hand, a nation like Russia might be much more inclined to actually disrupt our power grid now than it used to be. And, on the other hand, a nihilistic lone wolf or terrorist group could use AI to do much more damage than they ever could before. 

Just last month, we saw a glimpse of what this could look like when dozens of water and wastewater systems in small towns across the nation were attacked by a group of hackers most likely associated with Iran, leading to temporary water stoppages and flooding. These attacks have not been definitively linked to AI, but the National Security Agency warned soon afterward that hackers have been actively using AI to target US infrastructure like it. A few weeks later, President Donald Trump declared a national emergency over foreign interference in the power grid, which referenced the growing threat of cybersecurity.  

Preparing for the worst

Most of the nation’s water systems are extremely local and absurdly exposed to such attacks, so much so that “it’s almost like having a welcome mat” for a would-be hacker, said Bochman, mostly because these utilities are too small and underfunded to do much to stop them. “You have a million other problems to take care of, like aging infrastructure — your stuff’s falling apart because it’s been in the ground for 100 years,” he said. Addressing that deferred maintenance often feels far more urgent than doing “something more on cybersecurity.”

Whether it’s a rogue cluster of agents or a hostile nation-state trying to mess with our electricity, we should prepare our most important infrastructure for the worst. In Bochman’s view, that may mean rejecting the pressure to digitize everything in the first place and moving toward something that resembles the days when “people manned things like substations, communicated by a landline telephone, and read gauges, the analog things,” he said. “The screen is the thing that is infinitely manipulatable.”

Healey, who advised the Biden administration heavily on cybersecurity and infrastructure, believes that the nation desperately needs a coordinated response, between the federal government and AI companies, but also between the US and other countries like China, where similarly powerful models are being developed. And utility systems need to assume they will be a target and improve their cybersecurity practices accordingly, Healey says, ideally with funding from the federal government or, perhaps more appropriately, AI companies. 

Nobody knows precisely how vulnerable America’s infrastructure is to AI right now, in part because policymakers — and perhaps more disturbingly, AI’s creators themselves — seem woefully unsure of how to stop the technology from acting badly (or obeying bad orders) in the first place. For now at least, the solution might be, as Bochman suggests, to pull as many of our critical systems offline as possible, the better to hide it from AI and those who would misuse it.

“When bad things start to happen, no one will know what to do or why because they’re black boxes; the people that make them don’t know what’s going on inside,” Bochman said. “And the poor utility people who ultimately own the risk when someone gets hurt from a system” won’t understand what went wrong either, “and they’ll wish to God they’d never taken it on board.”

During a tense vote on a data center being built in her drought-stricken Arizona district last summer, Tucson City Councilmember Nikki Lee made an unlikely pitch: “We’re going to get a little out-of-this-world for a second, so just bear with me.” 

Like many of her constituents, Lee did not want Project Blue, a sprawling 290-acre data center, gobbling up an ounce of her local drinking water. “We need to put data centers where they belong,” she said, and “we don’t think data centers belong in the desert.”  

President Donald Trump’s recent bluster aside, it’s possible that the only thing as bipartisan as loving Dolly Parton is hating data centers, whose construction has become so controversial, so costly, and so backlogged here on Earth that companies like Google, Meta, and of course, SpaceX, are actively flirting with the idea of flinging them into orbit instead. Soon after the Tucson City Council rejected Project Blue’s attempt to connect to city utilities, Amazon Web Services, the secretive intended beneficiary, pulled out of the project, and another Jeff Bezos company, Blue Origin, filed a plan with regulators for tens of thousands of possible new data centers, this time, destined for orbit. 

Sure, launching a hyperscale AI data center into space is still unprecedented engineering-wise, carries an unfathomably large price tag, could engender its own severe environmental risks, and may or may not draw unwelcome attention from the hunters among the stars. But for AI companies, such trade-offs might still be preferable to the terrestrial roadblocks, among them an explosive populist backlash and a 12-year wait to connect to the power grid. 

Next Thursday, Google plans to launch a pilot satellite capable of processing basic AI queries into orbit, the most significant test yet in what’s become a burgeoning race to power AI from space. For now, the satellite won’t approach the levels of computing power at a hulking terrestrial data center like Project Blue. But it is a major step toward a future in which many or even most of our AI queries will be powered not from the outskirts of a city like Tucson, but from a blinking data center circling the skies.

SpaceX’s gargantuan initial public offering earlier this summer was predicated on the idea that it would launch a thus-far-unrealized fleet of orbital data centers to fuel much of the AI economy. The company — whose rockets Google will use to launch its pilot — claims that by the end of this decade, possibly as early as 2028, it will have successfully assembled an AI data center in orbit, with plans to eventually harvest a staggering 100 gigawatts of new solar energy for AI annually, equivalent to one-fifth of all US electricity consumption last year. (As always, that’s a very iffy promise.)

Still, as Google’s overtures clearly demonstrate, it’s no longer a question of if large-scale space-based data centers could be technically feasible, but rather when they’ll be ready to launch, and perhaps more importantly, whether the math of using them to power something like AI will make much financial sense anytime soon. As of now, building a one-gigawatt data center in space would cost about $51.5 billion, according to an analysis by aerospace engineer Andrew McCalip, compared with $16 billion for one on land.

“They’re not breaking any rules of physics. Yes, there are going to be engineering challenges, but they are all solvable with enough time and money,” said Jason Aspiotis, a leading space systems engineer who now leads an orbital data center startup. “The gray area is, well, what about the economics?” 

But even if this astronomically kooky plan does take off, it may not change much for those of us left on terra firma: Our energy bills will remain high, even if data centers aren’t there to drive them up. Our earthly infrastructure — affordable housing, public transit, and more — may be just as hard to build as ever. Harder even, maybe, given that crucial resources and untapped tax revenue will be literally rocketing up out of our reach.

No, if these tech giants succeed, it will not fix what’s wrong here on Earth, but merely prove once again their exemption to the gravitational forces holding the rest of us down.  

Space-based data centers, explained

My father spent most of his career working in the satellite industry, and would sometimes let me waltz inside the quaint little data center housed in his office, a room I remember as roughly the size of my school’s computer lab, hosting rows upon rows of servers that I couldn’t touch, churning with a cool, mechanical hum as they crunched zeroes and ones.

AI data centers work similarly to that server room but on an exponentially larger scale, requiring far more land and energy to run, and much more extravagant cooling systems. Sending his office’s data center into orbit would have been extraordinarily difficult, and getting one of the facilities that powers modern LLMs aloft would be an even larger, more ambitious undertaking. But the benefits — namely, “cheap space (no pun intended) and power,” as my dad put it to me recently — are even more enticing.

An orbital data center need not negotiate with an elected official like Lee over precious water rights to the Colorado River, though it would need to install bigger-than-football-field-sized heat radiators to keep itself cool. You can’t simply launch something that big into orbit, meaning a space-based hyperscale data center — the size of which would likely rival that of the International Space Station — would need to be assembled piece by piece, probably by robots. And while the sun would provide an endless supply of solar power to process your ChatGPT queries, it would also inflict incessant radiation on delicate circuitry. If something breaks, you can’t send a technician up to fix it. Many experts are also concerned that if an excess of space junk, which extraterrestrial data centers would inevitably produce, begins colliding like bumper cars in Earth’s low orbit, it could knock out the orbital infrastructure we already rely on, like GPS navigation and weather satellites. 

Even plastic decays in space, said Sven Bilén, a professor of aerospace engineering at Penn State, who, like Aspiotis, believes that early orbital data centers will probably be “processing data from space, like spatial imaging satellites or weather satellites, as opposed to, you know, cat videos” or AI-generated reality TV slop. 

But even if AI is not the lowest-hanging fruit for deploying compute into space, it is certainly the deepest-pocketed, meaning that many investors and companies like SpaceX and Google seem quite willing to shoulder the start-up costs anyway. And considering how difficult it’s gotten to build data centers on Earth, or at least in the United States, it’s indeed possible that space could become the cheaper, or at least most convenient option, more quickly than one might think. 

“In some form or another, in five years, we are going to have some orbital data centers in space for sure,” Krishna Muralidharan, who leads the Center for Semiconductor Manufacturing at the University of Arizona, told me, but it’s hard to say right now whether those consist of just a few expensive prototypes, or the beginning of a much bigger swing toward orbital compute. “Only time will tell whether you’re going to have a business case for it.”

Can we send our data center problem into space?

So, is it better to have a data center in space or in your backyard?

David Reid, a member of Virginia’s House of Delegates representing Loudoun County, home to more data centers than anywhere else on Earth, says the question has repeatedly come up at his town hall meetings. Reid is the rare politician — apart from the president, anyway — willing to defend terrestrial data centers, calling them a “money-printing machine” for local schools and infrastructure. Having spent decades working in the defense and technology sectors, he is doubtful that the math on orbital data centers will ever make sense.

“I believe this is, for lack of a better term, fictional nonsense,” he said, and is “creating a distraction from the fact that local officials here on Earth still need to make better zoning decisions.”

If most of the AI industry can eventually be powered by space, as SpaceX claims, it will require millions of sprawling new satellites, in an orbit currently dotted by fewer than 20,000 of them. Though “space is really big,” as Elon Musk has put it, one million satellites would still profoundly and, likely irrevocably, transform our night sky into one in which data centers outnumber visible stars.

“Will humanity notice if there are fewer stars in the sky? Well, not so much right now,” given light pollution in many cities, said John Barentine, an astronomer and environmental advocate for the night sky. “But what if they’re replaced by these artificial stars in the night sky? Is that the point at which people will say, ‘Wait a minute, we don’t want this. We want the benefits, but we don’t want this as a consequence.’”

This is, of course, the tension also at the heart of building data centers here on Earth. To some extent, they’re the most tangible representations of how little power we have to shape the course of a transformative new technology that few trust, and even fewer asked for. It’s one thing to object to a hulking data center, but it might be another altogether to see the sigils of our digital overlords illuminating the firmament. Would a place like Tucson, one of the most beautiful places to stargaze in the world, prefer a Project Blue to a starscape marred by blinking servers in the sky?

Update, September 24, 10:35 am ET: This post was originally published on September 3 and has been updated to include information about a pilot satellite capable of processing basic AI queries that Google is launching soon.