Suggest Trustworthy Tor Hidden Services as Time Sources for sdwdate

[Patrick]

prerequisite knowledge:
sdwdate Time Sources Criteria

Correct me if I am wrong…

• lpiyu33yusoalp5kh3f4hak2so2sjjvjw5ykyvu2dulzosgvuffq6sad.onion - anonymous operator, not adding
• Onion Search Engine onionsearchengine.com - anonymous operator, not adding
• neodomeoye5jx3ydcmm2gap7ggjwn2ofeiabhml6iqgridwa7qkhh5ad.onion # Neodome neodome.net - anonymous operator, not adding
• ProPublica propublica.org - already using
• qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion # Qubes OS qubes-os.org - not fulfilling criteria (used as repository), not adding
• metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion # MetaGer metager.org - could not verify onion is owned by same operator, not adding

Will add the other suggestions.

[Patrick]

6 new onion v3 time sources

[Patrick]

Removed all onion v2s. Links to git soon.

[nurmagoz]

This link looks suspicious with its behavior?

http://x6tkjqr46ghqmlqiwyllf5ufg6ciyexsxxfw2copx7cptw4aszq6fdqd.onion

once you open it then it will redirect you to clearnet version.

[Patrick]

Removed all onion v2s. Updated those onion v2 to onion v3 where I could find a onion v3. But we lost many onion time sources.

---

update to The Guardian v3

remove offline and onion v2

fix, remote duplicate TorStatus

remove onion v2s

update nrk.no to onion v3

update apache.be to onion v3

update publicintelligence.net to onion v3

remove onion v2

add searx.space onion v3

remove onion v2 since clearnet under maintenance

remove onion v2

remove onion v2

update privacyinternational.org to onion v3

remove onion v2

update huffingtonpost to onion v3

update sfchronicle to onion v3

fix

rebalance

fix

fix

[Patrick]

@nurmagoz

This link looks suspicious with its behavior?

http://x6tkjqr46ghqmlqiwyllf5ufg6ciyexsxxfw2copx7cptw4aszq6fdqd.onion

once you open it then it will redirect you to clearnet version.

From https://web.archive.org/web/20210430195930/https://onion.debian.org/

Indeed. That is weird. Removed.

removed since redirects to clearnet

[Patrick]

fix

---

We have now only ~ 8 onions per pool. From previously ~ 15 onions per pool.

From sdwdate log:

sdwdate - INFO - failed_urls: 1 allowed_failures: 2

Before: allowed_failures: 5

From sdwdate config:

## Allowed percentage of url failures common to every pool.
## If sdwdate frequently stops with "Maximum allowed number of failures" error,
## create a file "/etc/sdwdate.d/50_user.conf" overriding MAX_FAILURE_RATIO
## with a higher figure.
MAX_FAILURE_RATIO=0.34

MAX_FAILURE_RATIO=0.34 is now too low.

[Patrick]

MAX_FAILURE_RATIO=0.7

[torjunkie]

Here’s a few more that might be suitable.

http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
https://archive.today

http://fsfeorg3hsfyuhmdylxrqdvgsmjeoxuuug5a4dv3c3grkxzsl33d3xyd.onion/
https://fsfe.org/

http://3g2wfrenve2xcxiotthk4fcsnymzwfbttqbiwveoaox7wxkdh7voouqd.onion/
https://www.frontlinedefenders.org/

http://stn5vfgxtewbcpqexolnlk6edfyfgekscqllkyhhmtiujd4splaoo6yd.onion/
https://securethe.news/

http://ghzqae442wk5pbwqaj4bml4dpyn5dwnggbiszmgu44yu3474iocsffqd.onion/
https://themarkup.org/

http://cy6wj77vryhcyh6go576hxycjz4wxlo4s5vevdinkw3armwzty5jozyd.onion/
2600: The Hacker Quarterly

http://tiykfvhb562gheutfnedysnhrxpxoztyszkqyroloyepwzxmxien77id.onion/
Aftenposten AS

http://xm33ge4kupk5o66eqxcd2r4fqcplpqb2sbdduf5z2nw4g2jrxe57luid.onion
Aftonbladet

http://okd7utbak43lm7qaixr6yv7s62e32mhngjsfpjn26eklokqofg6776yd.onion
Apache

http://ogdwaroarq4p6rnfn2hl4crvldyruyc2g24435qtxmd3twhevg7dsqid.onion/
Bloomberg News

http://gppg43zz5d2yfuom3yfmxnnokn3zj4mekt55onlng3zs653ty4fio6qd.onion/
CBC

http://udgkmwzb5jmucs2r2cjtfscgf6s6d6otbt2qfiinovtwknsxk5oyzeid.onion/
Dagbladet

http://ppw2pmtagxykinex6uubypsommtrcg6ytdh6bcr6agq2wxnrweao4cad.onion/
HuffPost

http://5kcyaqagvnrvyan7y5ntzreqsn2msowqlmtoo46qju2pctlbkzzztxqd.onion/
Institute for Quantitative Social Science at Harvard University

http://e2kkexl7exz6rg7fhl4oftkaeojm7wlbw567hqu2tbrjlixsjjoynzad.onion/
https://securedrop.org/directory/investigacecz/

http://3gtoclri7h6xrtjjapfezcerj4dqf3fwfk3jmhrhz25i5pyprmz47gad.onion/
https://securedrop.org/directory/irozhlas-cz/

https://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion/
New York Times

http://537ztcntpbmspja4mkpxldpsoc46mqlssnsaklqnfw3gnlpj5glcjgid.onion/
NRK

http://lvtu6mh6dd6ynqcxtd2mseqfkm7g2iuxvjobbyzpgx2jt427zvd7n3ad.onion/
ProPublica

http://b52gknakgsyqqeq476oi5nymw6yapysfig4owqgwppi5qpuk4az6bxad.onion/
San Francisco Chronicle

http://jxsb4ovmavjy3r64bak4ha63xwggf3nzf3vikvs23r2avm5rhzmaqtqd.onion/
Stefania Maurizi

http://udhauo3m3fh7v6yfiuornjzxn3fh6vlp4ooo3wogvghcnv5xik6mnayd.onion/
Süddeutsche Zeitung

http://vplxle7awnyvvvduv6exnwrxbf4gzsh7lv7fxosnfl2ecidkttcbfcqd.onion/
TechCrunch

http://ahgpmkiaqfde4innkotgz5q6bgt4gbxmelqod3tjtmpdt3zvxaxareyd.onion/
The Center for Public Integrity

http://a4zum5ydurvljrohxqp2rjjal5kro4ge2q2qizuonf2jubkhcr627gad.onion/
The Globe and Mail

http://xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion/
The Guardian

http://xpxduj55x2j27l2qytu2tcetykyfxbjbafin3x4i3ywddzphkbrd3jyd.onion/
The Intercept

https://vfnmxpa6fo4jdpyq3yneqhglluweax2uclvxkytfpmpkp5rsl75ir5qd.onion/
The Washington Post

http://srumyob2jq5nvppzt66aaab333n2wmq6xgkg4khfe24ixdb7umf7mtyd.onion/
TV2 Denmark

http://a2c6mmacrmxtaspbolytfxm6q2zq7svtkuaog5xetbcxr3mpy4pmomid.onion/
VICE Media

http://kogbxf4ysay2qzozmg7ar45ijqmj2vxrwqa4upzqq2i7sqj7wv7wcdqd.onion/
Whistleblower Aid

If you are looking for more suitable v3 onions then I suggest maybe using this indexed list - see: Ahmia - Hidden service list

Or better still, searching for reputable onions - see: Search results for — Ahmia

Edit: strike-through text for ones already in the pool.

[Perestroika]

Thank you for this clarification (sdwdate Time Sources Criteria)

I suggest lowering the request timeout threshold, so sdwdate does not hang for long times on broken links.

[Perestroika]

Some more suggested time sources:

wasabiukrxmkdgve5kynjztuovbg43uxcbcxn6y2okcrsg7gb6jdmbad.onion # Wasabi Wallet [wasabiwallet.io]

keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion # Keybase [keybase.io]

6hasakffvppilxgehrswmffqurlcjjjhd76jgvaqmsg6ul25s7t3rzyd.onion # Bitcoin Core [bitcoincore.org]

blkchairbknpn73cfjhevhla7rkp4ed5gg2knctvv7it4lioy22defid.onion # Blockchair [blockchair.com]

trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad.onion # Trezor Hardware Wallet [trezor.io]

g7ejphhubv5idbbu3hb3wawrs5adw7tkx7yjabnf65xtzztgg4hcsqqd.onion # DEF CON [defcon.org]

jrw32khnmfehvdsvwdf34mywoqj5emvxh4mzbkls6jk2cb3thcgz6nid.onion # DEF CON Groups [defcongroups.org]

m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion # DEF CON Media Server [media.defcon.org]

privacy2ws3ora5p4qpzptqr32qm54gf5ifyzvo5bhl7bb254c6nbiyd.onion # Privacy International [privacyinternational.org]

rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion # WikiLeaks Form Submission [wikileaks.org]

vnchbkzryteygshp53p6zfya7jyrzaugjzmfwtejh4acnaxnm47t2nad.onion # GlobaLeaks [globaleaks.org]

potatoynwcg34xyodol6p6hvi5e4xelxdeowsl5t2daxywepub32y7yd.onion # Go Beyond [go-beyond.org]

45tbhx5prlejzjgn36nqaxqb6qnm73pbohuvqkpxz2zowh57bxqawkid.onion # Packwart [parckwart.de]

hjadhquqiy4c64apcyex3vkbfxm44shpkdc7e443c2b5mses5rdiggqd.onion # Gabucion [gabucino.hu]

offprivqqdxfmssktx3y5h3miqvceq6yy37s5sxkhz4mojvsz74ohqid.onion # Offensive Privacy [offensiveprivacy.com]

ghzqae442wk5pbwqaj4bml4dpyn5dwnggbiszmgu44yu3474iocsffqd.onion # The Markup [themarkup.org]

lxjacvxrozjlxd7pqced7dyefnbityrwqjosuuaqponlg3v7esifrzad.onion # Security in-a-box [securityinabox.org]

stormwayszuh4juycoy4kwoww5gvcu2c4tdtpkup667pdwe4qenzwayd.onion # Cryptostrom VPN [cryptostorm.is]

dlegal66uj5u2dvcbrev7vv6fjtwnd4moqu7j6jnd42rmbypv3coigyd.onion # Decoded.legal [decoded.legal]

27m3p2uv7igmj6kvd4ql3cct5h3sdwrsajovkkndeufumzyfhlfev4qd.onion # The Intercept [theintercept.com]

s3p666he6q6djb6u3ekjdkmoyd77w63zq6gqf6sde54yg6bdfqukz2qd.onion # Bisq [bisq.wiki]

monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion # Monero Project [getmonero.org]

3g2wfrenve2xcxiotthk4fcsnymzwfbttqbiwveoaox7wxkdh7voouqd.onion # Front Line Defenders [frontlinedefenders.org]

tv54samlti22655ohq3oaswm64cwf7ulp6wzkjcvdla2hagqcu7uokid.onion # Matt Traudt [matt.traudt.xyz]

[Patrick]

Please check/edit/remove those who are already added:
sdwdate/30_default.conf at master · Kicksecure/sdwdate · GitHub

[halo9en]

I would be hesitant of using CTemplar’s v3 onion for sdwdate unless we are very desperate. PrivacyTools.IO issues (https://github.com/privacytools/privacytools.io/issues/1642) is worth reading. The owner seems rather untrustworthy in my view. Tacit promotion of his service may encourage users to use that service and he is rather manipulable under pressure to say the least. A) good that he is not anonymous, B) bad that he behaves in an unsavory manner.

[torjunkie]

@Patrick

Please check/edit/remove those who are already added:
sdwdate/30_default.conf at master · Whonix/sdwdate · GitHub

Done for both posted suggestions - please add the rest. That is 49 additional v3 onions which should be great for the pools i.e. ~+16 for each.

@halo9en

I would be hesitant of using CTemplar’s v3 onion for sdwdate unless we are very desperate.

You mean this one?

“http://ctemplarpizuduxk3fkwrieizstx33kg5chlvrh37nz73pv5smsvl6ad.onion#CTemplar Email https://ctemplar.com Scan results for https://ctemplar.com/ https://web.archive.org/web/20210101193954/https://securityheaders.com/?q=https%3A%2F%2Fctemplar.com%2F&followRedirects=on”

[Patrick]

@HulaHoop

@nurmagoz

That discussion is meaningless to this thread. ctemplare will be kept as it is.

I disagree. Very relevant since we don’t allow services by anonymous operators for liability reasons. I think the opinion of the privacyIO dev is important to re-read here:

The reason being we do not like to provide information which cannot be verified by public sources. We don’t allow anonymous companies to provide services because it involves people trusting an unknown entity with their data that cannot be verified. If the company fails or does something disastrous there is no recourse.

To add CTemplar we would have to relax/remove our trust requirements. If we did this, we’d have all sorts of services recommended (we actually put that requirement in place to ward against people recommending random unknown .onion service email providers).

We won’t be signing any NDAs regarding this, as it would mean we cannot reveal what we learn, and thus puts it on the community to trust us instead of the company they’re doing business with.

That discussion belongs there:
sdwdate Time Sources Criteria - #2 by Patrick

Will quote there.

@Perestroika

I suggest lowering the request timeout threshold, so sdwdate does not hang for long times on broken links.

That belongs here: sdwdate Time Sources Criteria and/or sdwdate and sdwdate-gui development thread.

[Patrick]

http://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion/ # keys.openpgp.org

[nurmagoz]

The above hidden services posted are fine to be added?

[nurmagoz]

@Patrick

metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion # MetaGer metager.org - could not verify onion is owned by same operator, not adding

tor hidden service - MetaGer

[nurmagoz]

@Perestroika

trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad.onion # Trezor Hardware Wallet [trezor.io]

I coudnt find the evidence that their clearnet website is the one mirrored to the mentioned onion v3 (no headers nor they mention it in their website)

@Perestroika

rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion # WikiLeaks Form Submission [wikileaks.org]

this will redirect to:

http://rpzgejae7cxxst5vysqsijblti4duzn3kjsmn43ddi2l3jblhk4a44id.onion/wlupload.en.html

doesnt effect timing right? and which one to add? cc @Patrick

@Perestroika

hjadhquqiy4c64apcyex3vkbfxm44shpkdc7e443c2b5mses5rdiggqd.onion # Gabucion [gabucino.hu]

onion website looks very empty, clearnet without https… i dont feel comfortable adding it. i wont add it unless someone else willing to do that.

---

All of the above added (Except what i asked question about) plus ddg v3:

http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t/v3-onions-for-essential-whonix-defaults-besides-sdwdate/11728/24