Skip to content
STATEOF WATCH

Mirrors and Tor

The record should outlive this site

Every version of this site is a folder of static files. No server, no database. Anyone can download it, check it, and host an exact copy.

Tor

The same site, as an onion service:

http://sowatchmphqybq2wql4zvwdzmxwmxvbema2r6dptztdusapje3qzbpyd.onion

Where copies live

  • Internet Archive: every release as its own item, with its checksum and signature.
  • Wayback Machine: every page captured each time a new release is published.
  • IPFS: every release, under a content id that changes if a single byte does. The ids are in the release list.
  • Independent mirrors: none listed yet. If you host one, tell us and it goes here.

Download

Every published version is kept, each as one archive of the complete site with a SHA-256 checksum. Release names carry the content version (v3.33) and the UTC time it was published, so any change to the site gets a new name.

The release list also links each release's Internet Archive and IPFS copies. Every copy checks against the same checksum and signature.

Host a mirror

  1. Download mirror-update.sh and read it. It is about 30 lines of plain shell.
  2. Run it once: ROOT=/var/www/stateofwatch sh mirror-update.sh. It fetches the latest release, checks its checksum, and unpacks it into that folder.
  3. Serve that folder from any static web host, at the root of a domain or onion address. No build step, no server code.
  4. Run it daily from cron to stay current. It does nothing when you already have the latest release. It can fetch through Tor from the onion address instead; the script shows how.

Take it. Don't impersonate it.

Our work here is dedicated to the public domain (CC0 1.0): copy it, mirror it, translate it, cut it up, reuse it for anything, no credit needed.

The source documents under Documents are not ours to dedicate. They are public records, reproduced as filed so you can check our work against them. Court opinions and orders are public domain; briefs and other filings are the work of whoever filed them; policies belong to the agency that wrote them. Each document's page says exactly what, if anything, we changed in our copy.

What is ours is exactly what our signed releases contain. A copy that doesn't match a signed release isn't State of Watch, whatever it calls itself. Please don't present a changed copy as this site. Readers can always check, as below.

Check who made it

A checksum only proves the archive arrived intact; it comes from the same place as the archive. Each release is also signed with a key used for nothing else: the release key, fingerprint 5C80 F04A E59F 0FA9 7850 813D C0F8 4CF8 ECB4 7744. It is certified by the key we use for email (5C1F 42CA 7375 1AB6 45DA 0E28 7F2D 1B13 4F3B 9F0F).

Compare that fingerprint on this site and on the onion before trusting it. Then check any release: gpg --verify FILE.tar.gz.asc FILE.tar.gz. mirror-update.sh does this on every update once you give it the key; the top of the script shows how.

Only need the data? The JSON and feeds are enough to rebuild everything.