Any way to hide CPU info from Whonix?

[Patrick]

@Waltz5

If you’re currently using Whonix for KVM and you’re using Virt-Manager, you can go to CPUs, disable host-passthrough and select qemu64.

This was discussed here:

Potential improvements for Virtual Machine Cloaking - KVM

By default, the CPU model information is leaked, which significantly reduces anonymity when running untrusted software. This issue can be addressed (with a slight performance impact) by using KVM and changing the CPU model to ‘qemu64’ instead of ‘host-passthrough’. Additionally, ensure that necessary features to protect against Spectre, Meltdown, and other attacks are enabled. <cpu mode="custom" match="exact" check="none"> <model fallback="forbid">qemu64</model> <feature policy="require" na…

Not safe without further research, pending todo tasks:

Potential improvements for Virtual Machine Cloaking - KVM

We might be able to change the default configuration files but maintaining a different set of configuration files is unfortunately unrealistic due to lack of KVM contributor activity. This should be sufficient on Intel processors to protect against Spectre and Meltdown attacks. Since nobody else on the internet claims to do that, and this being highly complex question with security impact… TODO: Contact Qemu-discuss Info Page and ask if this is secure or vulnerable to any CPU hardware s…