Private Decentralized Communication Network
Go to file
Kevin Froman ff1d7b4982 don't print version command to devnull in run script either 2021-01-22 23:10:40 +00:00
.github Create stale.yml 2020-02-21 03:32:31 -06:00
.vscode added sneakernet auto importing 2020-03-30 20:52:04 -05:00
docs added security mechanisms doc 2021-01-16 01:40:48 +00:00
install move centos install 2021-01-12 05:01:45 +00:00
scripts * revert pow to 5 2020-12-22 01:53:04 +00:00
src don't use tor watchdog for now 2021-01-22 22:46:02 +00:00
static-data remove chat web files 2020-12-29 07:58:44 +00:00
tests update runtime-result 2021-01-15 18:48:14 +00:00
.dockerignore Docker improvements 2021-01-22 20:20:17 +00:00
.env don't use hard coded python version number in .env file 2021-01-15 08:56:20 +00:00
.gitignore add all venvs to gitignore and update changelog 2020-12-22 01:55:05 +00:00
.gitlab-ci.yml added helium test deps to ci 2020-03-04 17:02:03 -06:00
.onionr.yml Rename AUR package to onionr-git 2019-07-22 17:04:02 -07:00
AUTHORS.MD * started endpoint for non-app specific control of direct connections 2019-08-15 03:36:05 -05:00
CHANGELOG.md add all venvs to gitignore and update changelog 2020-12-22 01:55:05 +00:00
CODE_OF_CONDUCT.md fixed everything being executable permission 2019-06-16 02:04:32 -05:00
CONTRIBUTING.md fixed some bugs 2019-08-06 00:49:31 -05:00
Dockerfile Docker improvements 2021-01-22 20:20:17 +00:00
ISSUE_TEMPLATE.md Use list for version infos in issue template 2021-01-15 08:56:20 +00:00
LICENSE.txt Update LICENSE.txt 2019-07-12 17:58:46 +00:00
Makefile moved to niceware from mnemonic 2019-09-29 21:14:43 -05:00
README.md improved readme layout 2021-01-16 01:40:37 +00:00
SECURITY.md moved tests to parent directory 2019-09-12 21:22:25 -05:00
git-update.sh bug fixes in block creation and directory security 2020-11-23 03:47:50 +00:00
make-release.sh added site lister 2020-02-05 01:49:24 -06:00
onionr.sh Added custom port and bind address args 2020-12-16 04:44:25 +00:00
requirements-ARM.txt Added a new ARM64 (Raspberry Pi's for example) patch allowing for proper support now. 2021-01-15 22:23:24 +00:00
requirements-dev.in Bump pdoc3 from 0.9.1 to 0.9.2 2021-01-16 20:31:06 +00:00
requirements-dev.txt Bump pdoc3 from 0.9.1 to 0.9.2 2021-01-16 20:31:06 +00:00
requirements-notifications.in added sound notification support and forward secery setting finished 2020-02-17 06:13:57 -06:00
requirements-notifications.txt boards now load async 2019-09-06 00:18:25 -05:00
requirements.in bump deps 2020-12-22 00:54:29 +00:00
requirements.txt bump deps 2020-12-22 00:54:29 +00:00
run-onionr-node.py don't print version command to devnull in run script either 2021-01-22 23:10:40 +00:00
run-onionr-node.sh Docker improvements 2021-01-22 20:20:17 +00:00
run_tests.sh finishd tests for multicast lan service discovery 2020-03-14 00:56:10 -05:00
sandboxed-onionr.py + added sandbox script 2020-11-02 23:47:38 +00:00
setprofile.sh fixed everything being executable permission 2019-06-16 02:04:32 -05:00
start-daemon.sh added restart command 2019-09-20 11:25:12 -05:00
start-many-nodes.py added script to start many nodes 2020-04-04 00:58:49 -05:00
start-ram.sh improve start ram script to use quotes 2020-03-24 03:17:40 -05:00

README.md

Privacy Respecting Communication Network 📡

Anonymous social platform, mail, file sharing.

- Discord - Matrix: #onionr:amorgan.xyz

Install Features Screenshots
Docs/web copy Get involved Onionr.net/.onion

The main repository for this software is at https://git.VoidNet.tech/kev/onionr/

Mirrors: Github, Gitlab

Onionr ("Onion Relay") is a decentralized/distributed peer-to-peer communication network, designed to be anonymous and resistant to (meta)data analysis, spam, and corruption.

Onionr stores data in independent packages referred to as 'blocks'. The blocks are distributed to all interested nodes. Blocks and user IDs cannot be easily proven to have been created by a particular user. Even if there is enough evidence to believe that a specific user created a block, nodes still operate behind Tor and as such cannot be trivially unmasked. Anonymity is achieved by a stateless network, with no given indication of what node a block originates from. In fact, since one is not required to participate in routing or storage to insert a message, blocks often do not originate from any identifiable node.

Through message mixing and key privacy, it is intended to be nigh impossible to discover the identity of a message creator or recipient. Via long-term traffic analysis, a well funded adversary may discover the most probable node(s) to be creating a set of related blocks, however doing so would only lead them to a node behind Tor. As the first node that a block appears on is almost always not the creator of the block, there is plausible deniability regarding the true creator of the block.

Onionr gives the individual the ability to speak freely, without fear of surveillance and censorship.

Users are identified by ed25519/curve25519 public keys, which can be used to sign blocks or send encrypted data.

Onionr can be used for mail, as a social network, instant messenger, file sharing software, or for encrypted group discussion.

Due to the nature of anonymity, the graph as implemented in this reference network is dense, undirected, cyclic and can be disconnected. As a result, current scalability is poor but sufficient for high latency communications. As the need arises isolated stream solutions may be implemented (in a manner similar to described in the Bitmessage whitepaper). Since Onionr is technically just a data format, any routing scheme can be used to pass messages.

The whitepaper is available here.

Main Features

  • 🌐 Fully p2p/decentralized, no trackers or other single points of failure
  • 🔒 End to end encryption of user data
  • 📢 Optional non-encrypted blocks, useful for blog posts or public file sharing
  • 💻 Easy HTTP API for integration to websites
  • 🕵️ Metadata analysis resistance and anonymity
  • 📡 Transport agnosticism (no internet required)

Onionr ships with various application plugins ready for use out of the box:

Currently usable:

  • Mail
  • Public anonymous chat/message board
  • Simple webpage hosting - Will be greatly extended
  • File sharing (Work in progress)

Not yet usable:

  • Instant messaging

Screenshots

Node statistics page screenshot

Home screen

Friend/contact manager screenshot

Friend/contact manager

Encrypted, metadata-masking mail application screenshot

Encrypted, metadata-masking mail application. One of the first distributed mail systems to have basic forward secrecy.

Documentation

More docs coming soon.

Install and Run on Linux

The following applies to Ubuntu Bionic. Other distributions may have different package or command names.

Master may be unstable, you should use the latest release tag. (checkout via git: $ git checkout release-latest)

$ sudo apt install python3-pip python3-dev tor

  • Have python3.7+, python3-pip, Tor (daemon, not browser) installed. python3-dev is recommended.
  • You may need build-essentials or the equivalent of your platform
  • Clone the git repo: $ git clone https://gitlab.com/beardog/onionr --tags
  • cd into install direction: $ cd onionr/
  • Install the Python dependencies (virtualenv strongly recommended): $ pip3 install --require-hashes -r requirements.txt (on ARM64 devices like Raspberry Pi 4's use requirements-ARM.txt instead.)
  • (Optional): Install desktop notification dependencies: $ pip3 install --require-hashes -r requirements-notifications.txt

(--require-hashes is intended to prevent exploitation via compromise of PyPi/CA certificates)

Run Onionr

  • Run Onionr normally: $ ./onionr.sh start
  • Run Onionr in background as daemon: $ ./start-daemon.sh
  • Open Onionr web interface $ ./onionr.sh openhome
  • Gracefully stop Onionr from CLI $ ./onionr.sh stop

Contact/Community

  • Email: beardog [ at ] mailbox.org
  • Twitter: @onionrnet
  • Onionr Mail: decentralized-fiery-freehearted-skimmer-yodling-topstitch-divorceable-ojibwa-resettlement-infracted-lessor-noninstinctual-leaseholder-counterpoised-couture-skinful
  • Matrix: #onionr:amorgan.xyz
  • Discord: https://discord.gg/DVF2bEAzrt (Discord is bad for freedom and privacy, this is only provided for convienience)

Help out

Everyone is welcome to contribute. Help is wanted for the following:

  • Development (Get in touch first)
    • Creation of a shared lib for use from other languages and faster proof-of-work
    • Android and IOS development
    • Mac support (already partially supported, testers needed)
    • Bug fixes and development of new features
  • Testing
  • Translations/localizations
  • UI/UX design
  • Running stable nodes
  • Security review/audit
  • I2P support

Watch the talk from BSidesPDX 2019

improving anonymous networking talk link

Contribute money:

Donating at least $3 gets you cool Onionr stickers. Get in touch if you want them.

sticker

  • Bitcoin: 1onion55FXzm6h8KQw3zFw2igpHcV7LPq (Contact us for a unique address or for other coins)

  • Monero: 4B5BA24d1P3R5aWEpkGY5TP7buJJcn2aSGBVRQCHhpiahxeB4aWsu15XwmuTjC6VF62NApZeJGTS248RMVECP8aW73Uj2ax

  • USD (Card/Paypal): Ko-Fi

  • Indiegogo

Note: probably not tax deductible

Security

Onionr is alpha software. This means it is unstable, probably insecure, and experimental.

No matter how good Onionr and other software gets, there will always be ways for clever or well-funded adversaries to break your security.

Onionr does not protect your identity if you associate your user ID with your name either on Onionr or elsewhere.

Do not rely on Onionr or any other software to hold up if your life or liberty are at stake.

Licenses and Branding

Onionr is published under the GNU GPL v3 license, except for the logo.

The Tor Project and I2P developers do not own, create, or endorse this project, and are not otherwise involved.

Tor is a trademark for the Tor Project. We do not own it.

The Onionr logo was created by Anhar Ismail under the Creative Commons Attribution 4.0 International License.

If you modify and redistribute our code ("forking"), please use a different logo and project name to avoid confusion. Please do not use the project name or logo in a way that makes it seem like we endorse you without our permission.