Suggest Trustworthy Tor Hidden Services as Time Sources for sdwdate

dvwae436pd7nt4bc.onion

GitHub - moneroexamples/onion-monero-blockchain-explorer: Onion Monero Blockchain Explorer

Are Next-Generation Onions supported?

dynedlzyi34wgks4.onion#files.dyne.org heads downloads | heads

anonymous1:

Are Next-Generation Onions supported?

dynedlzyi34wgks4.onion#files.dyne.org heads downloads | heads

Next gen onions are untested.

For Whonix 14 maybe, once Tor version >= 0.3.2.1 enters
deb.torproject.org which should hopefully be soon, I’ll test them. I
don’t see why these wouldn’t work in Whonix.

sdwdate/30_default.conf at master · Kicksecure/sdwdate · GitHub needs a revision for Whonix 15.

These ones are down for two days.

pool 1 url v2d6nf2nsvvbgaqe.onion
pool 1 url znig4bc5rlwyj4mz.onion
pool 1 url y6xjgkgwj47us5ca.onion
pool 1 url efeip5ekoqi4upkz.onion
pool 1 url hpjw636qnt5avq62.onion
pool 1 url tigas3l7uusztiqu.onion
pool 1 url nrktipspgpsyoqwo.onion
pool 2 url owmx2uvjkmdgsap2.onion
pool 2 url ihds74mnwv3rhx2j.onion
pool 2 url blockchainbdgpzk.onion
pool 2 url zcashph5mxqjjby2.onion
pool 2 url pmwdzvbyvnmwobk5.onion
pool 2 url jirk5u4osbsr34t5.onion
pool 2 url nfkrkvghv75xsf26.onion
pool 2 url tsc64wi45alh6rkq.onion
pool 2 url kbbqa63mo7cchzut.onion
pool 2 url nhzgrlwhukwtajz4.onion
pool 3 url diasporaaqmjixh5.onion
pool 3 url bylu6d6nx3og7shy.onion
pool 3 url qubesosmamapaxpa.onion
pool 3 url fd6dqrupy3af4xwb.onion
pool 3 url s7y2awkwau4nbdpu.onion
pool 3 url cryjabkbdljzohnp.onion
pool 3 url 3g2upl4pq6kufc4m.onion
pool 3 url dmys7duszeb2salo.onion
pool 3 url n3txnhg64swyjlty.onion
pool 3 url ygzf7uqcusp4ayjs.onion
pool 3 url lwygejoa6fm26eef.onion
pool 3 url sgs4q3dzv74f723x.onion
pool 3 url bjk3o77eebkax2ud.onion
pool 3 url hhr6fex2giwmolct.onion
pool 3 url kakxayzmcc3zeomu.onion
pool 3 url swnwd5bhvjk4dd5o.onion
pool 3 url cvtwbn7mgxki7gvc.onion
pool 3 url p73stlm5nhogxw4w.onion
pool 3 url gbinixxw7gnsh5jr.onion

Could you please check if these have new onions?

See sdwdate/30_default.conf at master · Kicksecure/sdwdate · GitHub for their clearnet domain, if there is any mention about a new onion.

Right off the bat you can remove the Qubes one since they don’t support onion infrastructure anymore.

Some potential replacements on SecureDrop’s directory like Buzzfeed are not currently in our list as well as others.

In Whonix 15 we can do that, yes, onion v3 supported.

 v2d6nf2nsvvbgaqe.onion

:x: clearnet working: https://securedrop.publicintegrity.org/ using same onion url which is offline.

znig4bc5rlwyj4mz.onion

:x: Clearnet working: https://exposefacts.org/ using same onion url which is offline

y6xjgkgwj47us5ca.onion

:rosette: clearnet url is working The Intercept Welcomes Whistleblowers the onion changed to http://intrcept32ncblef.onion/ -

efeip5ekoqi4upkz.onion

:x: Clearnet working but [s]https://mormonleaks.io/[/s] shifted to https://truthandtransparency.org/ , and there is no onion link mentions anywhere.

hpjw636qnt5avq62.onion

:x: Clearnet working https://securedrop.24syv.dk/ but onion link isnt mentioned anywhere in the website.

tigas3l7uusztiqu.onion

:x: Clearnet is working https://mike.tig.as/ , onion v2 not mentioned in the website but he shift it to onion v3 http://e2wt5isng4lmqxa5rdbkoplx353mz7l66xkstsxwmb3rmzuhglo3s2yd.onion/ but its also not working.

nrktipspgpsyoqwo.onion

:rosette: Clearnet is working Varslertjeneste , the onion changed to http://nrkvarslekidu2uz.onion/

owmx2uvjkmdgsap2.onion

:x: Clearnet still working https://netpol.org/netpoleaks/ , Onion Link changed to https://owmx2uvjkmdgsap2.onion.link But still not working.

ihds74mnwv3rhx2j.onion

:x: Clearnet url still working https://ipi.media/programmes/ontheline/report-securely/ but the page itself in that url seems to be deleted and there is no .onion existed as replacement.

blockchainbdgpzk.onion

:x: Clearnet https://blockchain.info/wallet/anonymity leading to https://blockchainbdgpzk.onion but even that is not working. also going to https://www.blockchain.com/ doesnt show any onion url.

zcashph5mxqjjby2.onion

:x: Clearnet is working https://z.cash/ , but onion link is not working and there is no replacement founded on their main website.

pmwdzvbyvnmwobk5.onion

:x: Clearnet is working BrmTor [brmlab] but onion url same mentioned on their website and still not working.

jirk5u4osbsr34t5.onion

:x: Clearnet is working https://sks-keyservers.net/overview-of-pools.php but the onion link leading to Login – Nextcloud (though its no mentioning anywhere at the clearnet url)

nfkrkvghv75xsf26.onion

:x: Clearnet is down http://ams.sks.heypete.com/ so no way to know new onions links.

tsc64wi45alh6rkq.onion

:x: Clearnet is down https://vanunu.calyxinstitute.org/ so no way to know new onions links.

kbbqa63mo7cchzut.onion

:x: Clearnet is down https://sks.bonus-communis.eu/ so no way to know new onions links.

nhzgrlwhukwtajz4.onion

:x: Clearnet is down http://sks.fidocon.de/ (not compatible with GDPR so the admin shut it down) so no way to know new onions links.

diasporaaqmjixh5.onion

:x: Clearnet is working https://www.joindiaspora.com/ using same onion url which is offline.

bylu6d6nx3og7shy.onion

:x: Clearnet is working Security Without Borders but there is no onion url mentioned in their page.

qubesosmamapaxpa.onion

:x: Clearnet is working https://www.qubes-os.org/ , but until now news from their side on any new onion url.

fd6dqrupy3af4xwb.onion

:x: Clearnet is down https://repo.voidlinux.eu/ , so no way to know new onions links.

s7y2awkwau4nbdpu.onion

:x: Clearnet is down https://build.voidlinux.eu/ , so no way to know new onions links.

cryjabkbdljzohnp.onion

:x: Clearnet is down https://jabber.cryptoparty.is/ , so no way to know new onions links.

3g2upl4pq6kufc4m.onion

:x: the correct onion link is https://3g2upl4pq6kufc4m.onion/ (with tls)

dmys7duszeb2salo.onion

:x: Clearnet link is working https://duckduckgo.com/securedrop/ , using same onion url which is down.

n3txnhg64swyjlty.onion

:x: Clearnent link is working https://www.ev0ke.net/ , but no mention of onion url.

ygzf7uqcusp4ayjs.onion

:x: Clearnet link is working [tor-dev] Graphs - Estimated Traffic Capacity , using the same onion url which is down.

lwygejoa6fm26eef.onion

:x: Clearnet link is down https://compass.torproject.org/ , so no way to know new onions links.

sgs4q3dzv74f723x.onion

:x: Clearnet link is working https://crm.torproject.org/ (but needs username and password to access) , so no way to know new onions links.

bjk3o77eebkax2ud.onion

:x: Clearnet link is working https://donate.torproject.org/ , but no mention of onion url.

hhr6fex2giwmolct.onion

:x: Clearnet link is down https://munin.torproject.org/ , so no way to know new onions links.

kakxayzmcc3zeomu.onion

:x: Clearnet link is working https://nagios.torproject.org/icinga/ (but needs username and password to access) , so no way to know new onions links.

swnwd5bhvjk4dd5o.onion

:x: Clearnet link is working https://staging.crm.torproject.org/ (but needs username and password to access) , so no way to know new onions links.

cvtwbn7mgxki7gvc.onion

:x: Clearnet link is working staging.donate.torproject.org , but no mention of onion url.

p73stlm5nhogxw4w.onion

:x: Clearnet link is down https://test.donate.torproject.org/ (blank page), so no way to know new onions links.

gbinixxw7gnsh5jr.onion

:x: Clearnet link is down https://webstats.torproject.org/ , so no way to know new onions links.

1 Like

Its better if we remove the hidden services of Torproject,whonix,qubes,debian.

Good replacements would be:

  • Ahmia search engine:

http://msydqstlz2kzerdg.onion/

  • Candle

http://gjobqjj7wyczbqie.onion/

  • not Evil search engine:

http://hss3uro2hsxfogfq.onion/

- TOR66 search engine

~~http://tor66sezptuu2nta.onion/~~ (Edit by Patrick: see below)

  • TorBox onion mail

http://torbox3uiot6wchz.onion/

  • EludeMail

http://eludemaillhqfkh5.onion/

  • Invidious

Onion v2: http://kgg2m7yk5aybusll.onion/
Onion v3: http://axqzx4s6s54s32yentfqojs3x5i7faxza6xo3ehd4bzzsg2ii4fv2iid.onion/

  • Crypto Uploader

http://cryptoupei2am6si.onion/

  • CryptoShare

http://qtx6d2ggmma6hgio.onion/

  • BlackCloud uploading files

http://bcloud2suoza3ybr.onion/

  • Anonymous file hosting (for uploading files)

http://iuploadwnensanof.onion/

  • RetroShare Chatserver

http://ytkumj6u4q5w2vsg.onion/

Reasons:

  • Whonix, Qubes, Debian: sources of package upgrades
  • Tor Project: anonymizer

Not using too many things from these organizations (not on top using them as time source provider) for better decentralization.

1 Like

[DuckDuckGo] Was offline for a couple of days and is now back. I think this unit test script should be run a week apart not two days.

they use tls with their onion service so it wont be supported by sdwdate.

Sometimes TLS enabled onions can be used without TLS anyhow (since their non-TLS page redirects to TLS version).

If curl --head onion works shows the Date: field it is ok.

curl --head 3g2upl4pq6kufc4m.onion

Date: Tue, 16 Apr 2019 02:38:56 GMT

Works.

1 Like

@nurmagoz via Whonix Forum:

maybe but better to avoid the problems from the beginning, rather than having it and it may causes problems in the future.

I don’t foresee problems in the future. They’ll probably alwayys have a
non-TLS onion to TLS-onion redirect which we can extra the time from.

1 Like

https://github.com/nurmagoz/sdwdate/commit/2985fc70625ae13aed45225b8c83592575c21a78

Thanks @nurmagoz.

Next to do: above requires review.

1 Like

ok in this case how about adding protonmail-onion as well:

protonirockerxow.onion

user@host:~$ curl --head protonirockerxow.onion
HTTP/1.1 301 Moved Permanently
Content-length: 0
Location: https://protonirockerxow.onion/

so protonmail onion not a good idea.

this is the exception of non-TLS onion to TLS-onion. because seems to be only TLS-onion

2 Likes

Finally merged. Next step is to review your new onions suggestions.

Could you review these suggestions please? @HulaHoop

1 Like

Why were the TPO and Debian onions sites nuked? They are all still functional. Also DuckDuckGo!

@nurmagoz have you actually checked those entries before deletion. These are some of our most trusted sources that have their own infrastructure.

These two new entries are good to go but they are a drop in the bucket compared to the ones ripped out that are fully functional.

Also Qubes has new hosted services I heard so it is good to re-add them when you get the new address.

Please try to look at the clearnet addresses and see if they just changed the onion address before removing the nonfunctional ones.