Current State of Kloak?

For users who are interested in trying out kloak within Whonix Workstation VMs on Qubes OS, you can now do so with a bit of manual effort. Work is underway to eventually make this unnecessary, but in the mean time here’s how you can enable it:

  • Launch a terminal in the whonix-workstation-17 template.
  • In whonix-workstation-17, run sudo apt install xserver-xorg-input-evdev. This is the X.Org evdev driver, which is necessary for the keyboard input method kloak requires.
  • In whonix-workstation-17, run sudo apt install kloak.
  • In dom0, run qvm-service whonix-workstation-17-dvm gui-agent-virtual-input-device on to enable the evdev-based input method.
  • Shut down whonix-workstation-17 and wait for it to fully shut down.
  • Launch a DispVM from whonix-workstation-17-dvm.
  • Open XFCE Terminal in the new DispVM.
  • Ensure you can type.
  • Run sudo systemctl stop kloak && sudo /usr/sbin/kloak -d250 & and ensure kloak starts properly.
  • Type a bit in the terminal, you should notice significant lag and randomized timing as what you type appears on the screen.
  • Press Ctrl+C to terminate kloak, then run sudo systemctl start kloak to start kloak with default settings again.
  • See Keystroke Deanonymization - Whonix if you want to set persistent settings that customize kloak’s behavior (like setting a longer input delay to allow better randomization of keystrokes and mouse movements).

In the event you accidentally lock yourself out of your Whonix Workstation VM while doing this, simply open a dom0 terminal and run qvm-service whonix-workstation-17-dvm gui-agent-virtual-input-device off, then shut down all Whonix Workstation VMs and start them up again. This will go back to the original input method.

1 Like