Mixed kloak anti keystroke / mice deanonymization tool package or better two separate packages?
kloak is an anti keystroke deanonymization tool. [1] A major enhancement
for the privacy software ecosystem. It's new and currently called a
prototype. We're currently discussing it [2] with upstream, Debian
packaging it [3] [4].
Upstream might also in future provide a anti mice keystroke
deanonymization tool.
I am currently wondering if I should suggest to upstream to create two
separate packages for anti keyboard and anti mice deanonymization or if
a shared package with both tools would be better?
Keystroke deanonymization is a huge danger to privacy. This attack even
works if one is using Tor Browser. There is an impressive commercial
keystroke tracking demo. [5] Even if Tor Browser - one day - defeats
this attack, we still want to solve it for other software such as ssh.
Best regards,
Patrick
[1] https://github.com/vmonaco/kloak
[2] https://github.com/vmonaco/keystroke-obfuscation/issues/1
[3] https://github.com/vmonaco/kloak/issues/3
[4] https://github.com/vmonaco/kloak/pull/5
[5] https://www.keytrac.net/en/tryout
Reply to: