In case anyone was wondering, Weinberg is a pushover with no constitution. I once asked him why #DuckDuckGo doesn't filter out privacy-abusing #Cloudflare sites & it triggered him. He had no sound defense.. no good answer for it. It's clear that he simply does not have the guts to truly deliver a privacy-respecting search engine. He's fixated on serving normies who are privacy-naive.

Follow

@resist1984 Perhaps a Cloudflare MITM warning instead of filtering out the sites completely from search results? I think warnings about MITM for HTTPS is much more relevant than the common site cookie warnings.

@modrobert Studies show that a search result is *twice* as likely to be clicked on than the result immediately below it. So rank matters. A privacy respecting search engine does not give high ranks to Cloudflare sites.

@modrobert Consider what Ss does: it folds the #Cloudflare results at the bottom of the page. If the leading results are lacking, you can scroll to the bottom, unfold the CF sites & click the favicons to visit the archived mirrors of those sites. Ss: sercxi.nnpaefp7pkadbxxkhz2agtbv2a4g5sgo2fbmv3i7czaua354334uqqad.onion

@resist1984 That Onion URL must be broken, can't load it over Tor. Anyway, I guess that's one way to do it, still prefer a warning so the visitor knows HTTPS to this site is MITMed.

@otso @modrobert The onion URL works, but not for everyone. Tor Browser has no issues unless you've disabled #DoNotTrack. Other browsers will work, but you must enable DNT. If it still doesn't work, plz let me know and i'll make it known.

@resist1984 @otso I'm not using Tor browsers, using Chromium over Tor daemon. There is a '.' in the URL, that looks wrong to me, and it doesn't load.

@resist1984 @otso sercxi.nnpaefp7pkadbxxkhz2agtbv2a4g5sgo2fbmv3i7czaua354334uqqad.onion

Specifically the first '.' after 'sercxi' there looks wrong, hidden services Onion URL is a key plus the ".onion" part, and that key will fail.

@modrobert @otso the hostname "sercxi." is essential. If I omit the hostname, it fails even in Tor Browser. If you prefer, you can visit onion.sercxi.eu.org/ from Tor and it will redirect to the onion site. There is also sercxi.eu.org/, which works exclusively over clearnet.

@resist1984 @otso

"They are 16 characters long for V2 onion services and 56 characters long for V3 onion services."

en.wikipedia.org/wiki/.onion#F

The Onion URL you provided is 63 characters long (not counting the .onion part).

@resist1984 @modrobert

https://sercxi.eu.org/ did work in Waterfox, no joy with the other browsers like Tor Browser

some browsers showed favicon but nothing else, some showed error message about certificate

what is so special about this search engine?
@resist1984 @modrobert

https://onion.sercxi.eu.org/ in Tor Browser it directs to the onion site, but if I go past the warning I get a blank page, favicon (an umbrella) is there, nothing else.

https://sercxi.eu.org/ did now work in Firefox Developer Edition

this must be something experimental still

the point is to eliminate or go around Cloudflare?

would be nice to know a little bit more about this project.

@otso @modrobert Ss helps you avoid #Cloudflare. First, it gives results that are not polluted with CF sites. It's ideal to avoid CF sites completely. If for some reason the non-CF sites are lacking, you can scroll to the bottom of the results and expand the list of CF sites that were filtered out. From there, you can click on the favicons to visit the archive.org mirrors of the CF sites.

@modrobert @otso Ss also flags non-CF sites that block Tor, so you know to go straight to the archives.

@otso @modrobert The umbrella is indeed the correct favicon, but it should not be a blank page. It would be interesting to know what happens if you skip the query form & try a simple GET request, such as: sercxi.nnpaefp7pkadbxxkhz2agtb Notice that everything after "rq=" is the query.

@resist1984 @modrobert @otso sercxi.eu.org/ doesn't work in my clearnet browsers on my mobile internet. With Tor Browser it redirects to the onion address, which also doesn't work.
@modrobert @resist1984 @otso Oh! The https over onion was serious. I corrected it to http.

If I keep the https and allow an exception I get the search page with the umbrella.

@clacke @otso @modrobert yeah, indeed. They use SSL over onion not for crypto, but for verification purposes. So it must be HTTPS, and then you must accept the cert.

@clacke @otso @modrobert What's the error message when you try sercxi.eu.org over clearnet?

$ curl -i https://sercxi.eu.org/ curl: (92) HTTP/2 stream 0 was not closed cleanly: Unknown error code (err 2)

In browsers "Secure connection failed" or "The connection was interrupted".
@resist1984 @clacke @modrobert

it works at times, when it doesn't there is this:

https://sercxi.eu.org/

Secure Connection Failed
An error occurred during a connection to sercxi.eu.org.
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

@modrobert @otso I just tried it in #UngoogledChromium with DNT enabled, and indeed it does not work. The site is deliberately fussy & seems to want to encourage users to shrink their browser print, but I'm not sure what else is needed. It works for me in Tor Browser.

@otso @modrobert Sorry, I have to correct what I said earlier. onion.sercxi.eu.org/ *works* in Ungoogled Chromium for me. I get a "NET::ERR_CERT_AUTHORITY_INVALID" & was hasty to judge it as "broken". UG presents that error differently than Tor Browser so I didn't realize at 1st that I could click "proceed" in the fine print. Perhaps you have the same error.

@modrobert @otso Note as well that it's safe to ignore the SSL cert warning because you're ultimately going to an onion site, e2ee is inherent in the connection. The site uses SSL not for crypto but as a means for verification, & it tends to alarm people.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.