Suggest Trustworthy Tor Hidden Services as Time Sources for sdwdate

[Patrick]

MAX_FAILURE_RATIO=0.7

[torjunkie]

Here’s a few more that might be suitable.

http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
https://archive.today

http://fsfeorg3hsfyuhmdylxrqdvgsmjeoxuuug5a4dv3c3grkxzsl33d3xyd.onion/
https://fsfe.org/

http://3g2wfrenve2xcxiotthk4fcsnymzwfbttqbiwveoaox7wxkdh7voouqd.onion/
https://www.frontlinedefenders.org/

http://stn5vfgxtewbcpqexolnlk6edfyfgekscqllkyhhmtiujd4splaoo6yd.onion/
https://securethe.news/

http://ghzqae442wk5pbwqaj4bml4dpyn5dwnggbiszmgu44yu3474iocsffqd.onion/
https://themarkup.org/

http://cy6wj77vryhcyh6go576hxycjz4wxlo4s5vevdinkw3armwzty5jozyd.onion/
2600: The Hacker Quarterly

http://tiykfvhb562gheutfnedysnhrxpxoztyszkqyroloyepwzxmxien77id.onion/
Aftenposten AS

http://xm33ge4kupk5o66eqxcd2r4fqcplpqb2sbdduf5z2nw4g2jrxe57luid.onion
Aftonbladet

http://okd7utbak43lm7qaixr6yv7s62e32mhngjsfpjn26eklokqofg6776yd.onion
Apache

http://ogdwaroarq4p6rnfn2hl4crvldyruyc2g24435qtxmd3twhevg7dsqid.onion/
Bloomberg News

http://gppg43zz5d2yfuom3yfmxnnokn3zj4mekt55onlng3zs653ty4fio6qd.onion/
CBC

http://udgkmwzb5jmucs2r2cjtfscgf6s6d6otbt2qfiinovtwknsxk5oyzeid.onion/
Dagbladet

http://ppw2pmtagxykinex6uubypsommtrcg6ytdh6bcr6agq2wxnrweao4cad.onion/
HuffPost

http://5kcyaqagvnrvyan7y5ntzreqsn2msowqlmtoo46qju2pctlbkzzztxqd.onion/
Institute for Quantitative Social Science at Harvard University

http://e2kkexl7exz6rg7fhl4oftkaeojm7wlbw567hqu2tbrjlixsjjoynzad.onion/
https://securedrop.org/directory/investigacecz/

http://3gtoclri7h6xrtjjapfezcerj4dqf3fwfk3jmhrhz25i5pyprmz47gad.onion/
https://securedrop.org/directory/irozhlas-cz/

https://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion/
New York Times

http://537ztcntpbmspja4mkpxldpsoc46mqlssnsaklqnfw3gnlpj5glcjgid.onion/
NRK

http://lvtu6mh6dd6ynqcxtd2mseqfkm7g2iuxvjobbyzpgx2jt427zvd7n3ad.onion/
ProPublica

http://b52gknakgsyqqeq476oi5nymw6yapysfig4owqgwppi5qpuk4az6bxad.onion/
San Francisco Chronicle

http://jxsb4ovmavjy3r64bak4ha63xwggf3nzf3vikvs23r2avm5rhzmaqtqd.onion/
Stefania Maurizi

http://udhauo3m3fh7v6yfiuornjzxn3fh6vlp4ooo3wogvghcnv5xik6mnayd.onion/
Süddeutsche Zeitung

http://vplxle7awnyvvvduv6exnwrxbf4gzsh7lv7fxosnfl2ecidkttcbfcqd.onion/
TechCrunch

http://ahgpmkiaqfde4innkotgz5q6bgt4gbxmelqod3tjtmpdt3zvxaxareyd.onion/
The Center for Public Integrity

http://a4zum5ydurvljrohxqp2rjjal5kro4ge2q2qizuonf2jubkhcr627gad.onion/
The Globe and Mail

http://xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion/
The Guardian

http://xpxduj55x2j27l2qytu2tcetykyfxbjbafin3x4i3ywddzphkbrd3jyd.onion/
The Intercept

https://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion/
The Washington Post

http://srumyob2jq5nvppzt66aaab333n2wmq6xgkg4khfe24ixdb7umf7mtyd.onion/
TV2 Denmark

http://a2c6mmacrmxtaspbolytfxm6q2zq7svtkuaog5xetbcxr3mpy4pmomid.onion/
VICE Media

http://kogbxf4ysay2qzozmg7ar45ijqmj2vxrwqa4upzqq2i7sqj7wv7wcdqd.onion/
Whistleblower Aid

If you are looking for more suitable v3 onions then I suggest maybe using this indexed list - see: Ahmia - Hidden service list

Or better still, searching for reputable onions - see: Search results for — Ahmia

Edit: strike-through text for ones already in the pool.

[Perestroika]

Thank you for this clarification (sdwdate Time Sources Criteria)

I suggest lowering the request timeout threshold, so sdwdate does not hang for long times on broken links.

[Perestroika]

Some more suggested time sources:

wasabiukrxmkdgve5kynjztuovbg43uxcbcxn6y2okcrsg7gb6jdmbad.onion # Wasabi Wallet [wasabiwallet.io]

keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion # Keybase [keybase.io]

6hasakffvppilxgehrswmffqurlcjjjhd76jgvaqmsg6ul25s7t3rzyd.onion # Bitcoin Core [bitcoincore.org]

blkchairbknpn73cfjhevhla7rkp4ed5gg2knctvv7it4lioy22defid.onion # Blockchair [blockchair.com]

trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad.onion # Trezor Hardware Wallet [trezor.io]

g7ejphhubv5idbbu3hb3wawrs5adw7tkx7yjabnf65xtzztgg4hcsqqd.onion # DEF CON [defcon.org]

jrw32khnmfehvdsvwdf34mywoqj5emvxh4mzbkls6jk2cb3thcgz6nid.onion # DEF CON Groups [defcongroups.org]

m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion # DEF CON Media Server [media.defcon.org]

privacy2ws3ora5p4qpzptqr32qm54gf5ifyzvo5bhl7bb254c6nbiyd.onion # Privacy International [privacyinternational.org]

rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion # WikiLeaks Form Submission [wikileaks.org]

vnchbkzryteygshp53p6zfya7jyrzaugjzmfwtejh4acnaxnm47t2nad.onion # GlobaLeaks [globaleaks.org]

potatoynwcg34xyodol6p6hvi5e4xelxdeowsl5t2daxywepub32y7yd.onion # Go Beyond [go-beyond.org]

45tbhx5prlejzjgn36nqaxqb6qnm73pbohuvqkpxz2zowh57bxqawkid.onion # Packwart [parckwart.de]

hjadhquqiy4c64apcyex3vkbfxm44shpkdc7e443c2b5mses5rdiggqd.onion # Gabucion [gabucino.hu]

offprivqqdxfmssktx3y5h3miqvceq6yy37s5sxkhz4mojvsz74ohqid.onion # Offensive Privacy [offensiveprivacy.com]

ghzqae442wk5pbwqaj4bml4dpyn5dwnggbiszmgu44yu3474iocsffqd.onion # The Markup [themarkup.org]

lxjacvxrozjlxd7pqced7dyefnbityrwqjosuuaqponlg3v7esifrzad.onion # Security in-a-box [securityinabox.org]

stormwayszuh4juycoy4kwoww5gvcu2c4tdtpkup667pdwe4qenzwayd.onion # Cryptostrom VPN [cryptostorm.is]

dlegal66uj5u2dvcbrev7vv6fjtwnd4moqu7j6jnd42rmbypv3coigyd.onion # Decoded.legal [decoded.legal]

27m3p2uv7igmj6kvd4ql3cct5h3sdwrsajovkkndeufumzyfhlfev4qd.onion # The Intercept [theintercept.com]

s3p666he6q6djb6u3ekjdkmoyd77w63zq6gqf6sde54yg6bdfqukz2qd.onion # Bisq [bisq.wiki]

monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion # Monero Project [getmonero.org]

3g2wfrenve2xcxiotthk4fcsnymzwfbttqbiwveoaox7wxkdh7voouqd.onion # Front Line Defenders [frontlinedefenders.org]

tv54samlti22655ohq3oaswm64cwf7ulp6wzkjcvdla2hagqcu7uokid.onion # Matt Traudt [matt.traudt.xyz]

[Patrick]

Please check/edit/remove those who are already added:
sdwdate/30_default.conf at master · Kicksecure/sdwdate · GitHub

[halo9en]

I would be hesitant of using CTemplar’s v3 onion for sdwdate unless we are very desperate. PrivacyTools.IO issues (https://github.com/privacytools/privacytools.io/issues/1642) is worth reading. The owner seems rather untrustworthy in my view. Tacit promotion of his service may encourage users to use that service and he is rather manipulable under pressure to say the least. A) good that he is not anonymous, B) bad that he behaves in an unsavory manner.

[torjunkie]

@Patrick

Please check/edit/remove those who are already added:
sdwdate/30_default.conf at master · Whonix/sdwdate · GitHub

Done for both posted suggestions - please add the rest. That is 49 additional v3 onions which should be great for the pools i.e. ~+16 for each.

@halo9en

I would be hesitant of using CTemplar’s v3 onion for sdwdate unless we are very desperate.

You mean this one?

“http://ctemplarpizuduxk3fkwrieizstx33kg5chlvrh37nz73pv5smsvl6ad.onion#CTemplar Email https://ctemplar.com Scan results for https://ctemplar.com/ https://web.archive.org/web/20210101193954/https://securityheaders.com/?q=https%3A%2F%2Fctemplar.com%2F&followRedirects=on”

[Patrick]

@HulaHoop

@nurmagoz

That discussion is meaningless to this thread. ctemplare will be kept as it is.

I disagree. Very relevant since we don’t allow services by anonymous operators for liability reasons. I think the opinion of the privacyIO dev is important to re-read here:

The reason being we do not like to provide information which cannot be verified by public sources. We don’t allow anonymous companies to provide services because it involves people trusting an unknown entity with their data that cannot be verified. If the company fails or does something disastrous there is no recourse.

To add CTemplar we would have to relax/remove our trust requirements. If we did this, we’d have all sorts of services recommended (we actually put that requirement in place to ward against people recommending random unknown .onion service email providers).

We won’t be signing any NDAs regarding this, as it would mean we cannot reveal what we learn, and thus puts it on the community to trust us instead of the company they’re doing business with.

That discussion belongs there:
sdwdate Time Sources Criteria - #2 by Patrick

Will quote there.

@Perestroika

I suggest lowering the request timeout threshold, so sdwdate does not hang for long times on broken links.

That belongs here: sdwdate Time Sources Criteria and/or sdwdate and sdwdate-gui development thread.

[Patrick]

http://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion/ # keys.openpgp.org

[nurmagoz]

The above hidden services posted are fine to be added?

[nurmagoz]

@Patrick

metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion # MetaGer metager.org - could not verify onion is owned by same operator, not adding

tor hidden service - MetaGer

[nurmagoz]

@Perestroika

trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad.onion # Trezor Hardware Wallet [trezor.io]

I coudnt find the evidence that their clearnet website is the one mirrored to the mentioned onion v3 (no headers nor they mention it in their website)

@Perestroika

rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion # WikiLeaks Form Submission [wikileaks.org]

this will redirect to:

http://rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion/wlupload.en.html

doesnt effect timing right? and which one to add? cc @Patrick

@Perestroika

hjadhquqiy4c64apcyex3vkbfxm44shpkdc7e443c2b5mses5rdiggqd.onion # Gabucion [gabucino.hu]

onion website looks very empty, clearnet without https… i dont feel comfortable adding it. i wont add it unless someone else willing to do that.

---

All of the above added (Except what i asked question about) plus ddg v3:

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/v3-onions-for-essential-whonix-defaults-besides-sdwdate/11728/24

[nurmagoz]

"xy5d2mmnh6zjnroce4yk7njlkyafi7tkrameybxu43rgsg5ywhnelmad.onion#https://web.archive.org/web/20210125035242/https://kb.mailbox.org/display/MBOKBEN/The+Tor+exit+node+of+mailbox.org"

deleted because its offline.

I have rearranged the https+onion into one place.

Update 30_default.conf

[nurmagoz]

Forgot to add: (will add later with others after the patch accepted)

@torjunkie

http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
https://archive.today

@torjunkie

http://fsfeorg3hsfyuhmdylxrqdvgsmjeoxuuug5a4dv3c3grkxzsl33d3xyd.onion/
https://fsfe.org/

@Patrick

http://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion/ # keys.openpgp.org

---

worth to add as well:

http://eludemailxhnqzfmxehy3bk5guyhlxbunfyhkcksv4gvx6d3wcf6smad.onion/
https://elude.in/

http://cct5wy6mzgmft24xzw6zeaf55aaqmo6324gjlsghdhbiw5gdaaf4pkad.onion/
https://snopyta.org/

[Patrick]

@nurmagoz

The above hidden services posted are fine to be added?

Yes.

@nurmagoz

@Patrick

metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion # MetaGer metager.org - could not verify onion is owned by same operator, not adding

tor hidden service - MetaGer

Great!

@nurmagoz

@Perestroika

rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion # WikiLeaks Form Submission [wikileaks.org]

this will redirect to:

http://rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion/wlupload.en.html

doesnt effect timing right? and which one to add? cc @Patrick

Just the top level domain. The redirection doesn’t matter. What sdwdate does is similar to this this:

curl --head domain.onion

If the replay includes the Date: header then all is good.

[Patrick]

@nurmagoz

worth to add as well:

http://eludemailxhnqzfmxehy3bk5guyhlxbunfyhkcksv4gvx6d3wcf6smad.onion/
https://elude.in/

http://cct5wy6mzgmft24xzw6zeaf55aaqmo6324gjlsghdhbiw5gdaaf4pkad.onion/
https://snopyta.org/

Tiny / anonymous?

[Patrick]

Removed, since offline:

“http://tbrindusxnnqwmzov5qof56hyion6usmciqwykffxqsawswhk73aq5yd.onion # About me | Tudor Brindus”

[Patrick]

@Patrick

We have now only ~ 8 onions per pool. From previously ~ 15 onions per pool.

From sdwdate log:

sdwdate - INFO - failed_urls: 1 allowed_failures: 2

Before: allowed_failures: 5

From sdwdate config:

## Allowed percentage of url failures common to every pool.
## If sdwdate frequently stops with "Maximum allowed number of failures" error,
## create a file "/etc/sdwdate.d/50_user.conf" overriding MAX_FAILURE_RATIO
## with a higher figure.
MAX_FAILURE_RATIO=0.34

MAX_FAILURE_RATIO=0.34 is now too low.

We now have ~ 20 onions per pool. Therefore:

restore to `MAX_FAILURE_RATIO=0.34`

allowed_failures: 7

@halo9en

I wonder what your stance is on SearX as a model? They have a list of Tor instances here (http://searxspbitokayvkhzhsnljde7rqmn7rvoga6e4waeub3h7ug3nghoad[dot]onion/).

These are anonymous? Must be non-anonymous as per sdwdate Time Sources Criteria / sdwdate Time Sources Criteria.

[nurmagoz]

@nurmagoz

Forgot to add: (will add later with others after the patch accepted)

Added

Update 30_default.conf

@torjunkie

http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
https://archive.today

I couldnt prove that the clearnet URL is mirrored over that onion.

@Patrick

Just the top level domain. The redirection doesn’t matter. What sdwdate does is similar to this this:

added

@Patrick

Tiny / anonymous?

They are fine not much different than others available.