yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] totalcmdext:
Any option to have keweon on AndroidTV?
[Android Software/Hacking General [Developers Only]] MrT69:
I have no idea how this is working. I have a Samsung Smart TV and AppleTV.

Is this Android TV available within a browser?
[Android Software/Hacking General [Developers Only]] totalcmdext:
Yes is possible to use Browser/file manager with sideload
[Android Software/Hacking General [Developers Only]] MrT69:
Can you provide me a link or URL to this?

The next week I'm on the road because of business duty so it might take some time until it's solved...
[Android Software/Hacking General [Developers Only]] methuselah:
Messages are not getting connected. I mean it's Google messaging new feature. With nebula.
[Android Software/Hacking General [Developers Only]] MoHuToP:
From 01.12.19 connection thorough keweon is really lightning fast. Any recent changes?

Regards!
[Android Software/Hacking General [Developers Only]] L1p1c1:
keweonDNS for Windows

Download the QuickSetDNS from NIRSOFT and use it on Windows to change your DNS settings.

Currently it's only working with IPv4. Link to NirSoft is HERE

version 1.30 has support for ipv6 as well
[Android Software/Hacking General [Developers Only]] MrT69:
I will change the download Link next week and I will also add the IPv6 Server within the config.

Thanks a lot for monitoring ;)
[Android Software/Hacking General [Developers Only]] mucke5:
How can I configure unbound on Linux desktop (not server) including IPv4/IPv6 ? Is it possible :o ... up to know I run stubby.
[Android Software/Hacking General [Developers Only]] MrT69:
Take a look at this page:

https://calomel.org/unbound_dns.html

or copy & paste to use this config:

## DNS Over TLS, Simple ENCRYPTED recursive caching DNS, TCP port 853
## unbound.conf -- https://calomel.org
## FreeBSD 12 unbound config
#
server:
access-control: 10.0.0.0/8 allow
access-control: 192.168.0.0/16 allow
#access-control: fddd::/48 allow
aggressive-nsec: yes
#auto-trust-anchor-file: /usr/local/etc/unbound/root.key
cache-max-ttl: 14400
cache-min-ttl: 1200
chroot: /usr/local/etc/unbound
directory: /usr/local/etc/unbound
do-ip4: yes
do-ip6: yes
do-tcp: yes
hide-identity: yes
hide-version: yes
interface: 127.255.10.10
interface: ::2
pidfile: /var/run/local_unbound.pid
port: 53
prefetch: yes
rrset-roundrobin: yes
tls-cert-bundle: "/usr/local/share/certs/ca-root-nss.crt"
use-caps-for-id: yes
username: unbound

# Unbound from pkg built with libevent; increase threads and slabs to the
# number of real cpu cores to reduce lock contention. Increase cache size to
# store more records and allow each thread to serve an increased number of
# concurrent client requests.
# num-threads: 4
# msg-cache-slabs: 4
# rrset-cache-slabs: 4
# infra-cache-slabs: 4
# key-cache-slabs: 4
# msg-cache-size: 256M
# rrset-cache-size: 512M
# outgoing-range: 8192
# num-queries-per-thread: 4096

# forward-addr format must be ip "@" port number "#" followed by the valid public hostname
# in order for unbound to use the tls-cert-bundle to validate the dns server certificate.
forward-zone:
name: "."
forward-tls-upstream: yes
forward-addr: 1.0.0.1@853#one.one.one.one
forward-addr: 1.1.1.1@853#one.one.one.one
forward-addr: 8.8.4.4@853#dns.google
forward-addr: 8.8.8.8@853#dns.google
forward-addr: 9.9.9.9@853#dns.quad9.net
forward-addr: 149.112.112.112@853#dns.quad9.net

If you have problems by using this config then let me know. But it's quite easy for local usage.

Install unbound, copy and pase this config. Restart unbound and it's working. Now point you network card to DNS at 127.255.10.10 (v4) or ::2 (v6) .

That's it. Your NIC is asking unbound and unbound is forwarding all requests encrypted. When this is done then you can change the IP Address to keweonDNS. Just change the "forwrd-addr" and that's it.
[Android Software/Hacking General [Developers Only]] mucke5:
Could you offer a ready-to-use config like you do for QuickSetDNS, please? I would be surprised if you didn't optimize some settings... :D
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot for this but I must pass. Unbound is almost a tiny DNS genius because it's supports DNS, DoT and even DnsCrypt.

I have a almost 5 yrs old config for Unbound and this is for FreeBSD. I guess this will not really help because it only supports DNS.

If you want to teach yourself then use Unbound. From my point of view it's the best DNS for tiny and middle size environments.
[Android Software/Hacking General [Developers Only]] MrT69:
At the moment I'm playing around with some new caching thing. Inspired from a funny CISCO features I have developed a new acceleration thing which make it possible to reduce the response time to DNS requests by round about 50%. It seems I'm on the right way.

Thanks for this feedback!!!!
[Android Software/Hacking General [Developers Only]] totalcmdext:
Android TV

The cert isn't possible to installed in the AndroidTV. I suppose that there is specific layout for AndroidTV compared to Android.

Nebulo with keweon DNS is running without any problem.....
[Android Software/Hacking General [Developers Only]] MrT69:
No, there you can't install any cert. I have the same on my Samsung TV and there it is running also without problems.

I guess I need a Firestick or something else to log out what's the problem in detail.

EDIT:

I was taking a look at the Android TV site. Is it possible to run Android TV without a stick just on a Android Tablet???
[Android Software/Hacking General [Developers Only]] MrT69:
Now, for actual reasons I need your help please.

If there is a website about keweon, what should there be to find? What are you interested in, where do you need basics and what can you think is technically hard and deep?

Please give me some feedback what you want to see.
[Android Software/Hacking General [Developers Only]] O l l i X:
Ddwrt / openwrt setup, and a list of up to date ip's..

-Oh, and a little light thinguie.. Red, yellow and green, to see what the real time status is like.. ?

Btw, is there problems at the moment? Either that, Or I have some local issues.. ?

Thanks again! ❤️
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks for this. And it must be a local problem.

It also might be that this is sometimes a provider issue because the Servers are almost virtual, the entire backend is virtual and it's just a provider connect, not a carrier connect.
[Android Software/Hacking General [Developers Only]] simbahmgn:
Ads with firebase platform

Is it possible to block ads from Google's firebase platform?
[Android Software/Hacking General [Developers Only]] smokeyrider:
https://reinstall.keweon.center Are these DNS addresses still current or are there other addresses I should be using.

Thanks
[Android Software/Hacking General [Developers Only]] Devilet:
Hi, able to checkout why is this play.google.com/store/apps/details?id=homeworkout.homeworkouts.noequipment app ads not blocked? I tried both with or without the cert and the ads still shows.
[Android Software/Hacking General [Developers Only]] n0j0e:
Report here:

https://t.me/keweonReporting

Sent with much love and Android.
[Android Software/Hacking General [Developers Only]] alexacm:
Hello, I was wondering if the DoT servers listed on the OP are still current or if there is an update list somewhere?

thank you-
[Android Software/Hacking General [Developers Only]] O l l i X:
Use this:

https://reinstall.keweon.center/ :)
[Android Software/Hacking General [Developers Only]] MrT69:
App Alert:

PayPal secretly transmits authentication information from users by Android App to Google. Not tested on iOS.

Proof:

Block www.google-analytics[.]com and try to login into Paypal app. Reactivate URL and login/fingerprint is possible again

UPDATE:

Together with some users we have seen that this is only a problem if 2FA on Paypal enabled. Thanks to all the people who was helping support this.
[Android Software/Hacking General [Developers Only]] surya790:
[MENTION=304818]MrT69[/MENTION] Big fan of your work here.... But I'd like to ask something unrelated

The biggest ISP of India uses deep packet inspection to collect data on consumers. Is there any way to prevent it without TOr or VPNs ?

Source :

https://cis-india.org/internet-gove...jio-is-using-sni-inspection-to-block-websites

https://in.reuters.com/article/reli...esh-ambanis-20-billion-start-up-idINKCN11611V
[Android Software/Hacking General [Developers Only]] MrT69:
At the moment there is no real chance to prevent this. The solution against this would be eSNI (encrypted SNI).

This thing is currently still under development and it's still not finished.

But keep in mind that you have 2 problems.

The one thing is DNS which will be tracked. If you would use eSNI via DNS your Provider is still able to track what you are doing. It's not a problem to enable on a CISCO Switch logging to check the SNI packages and log this.

For SNI there is no decryption required. They don't have the option to decrypt the traffic in detail but the see who you are, what are you doing and how long you are doing this.

Because of keweon I was talking with a lot of providers within Germany. They all don't want to support me because they are logging the DNS traffic and sell the Data. Even a big German Mobile provider told this to me that they would loose too much money.

It seems I have had a good idea at the wrong time. User data are currently more valuable than gold or any applicable law.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
If your worried about subscription costs of VPNs, I can certainly recommend one of the lifetime VPN subscriptions offered at XDA Depot. And I'm not saying that as a moderator (I know, cheesy!) but I got the Ivacy lifetime from the Depot two years ago and it's been well worth it! Sorry for following a bit in the OT but I guess we're all here to achieve a bit more privacy :)

Don't buy just any VPN subscription, do your research beforehand. I'm sure you can find one that is perfect for your needs.
[Android Software/Hacking General [Developers Only]] vivekchamoli:
Mee too ..i got it 2years back from xda promotion depot.
[Android Software/Hacking General [Developers Only]] MrT69:
I already have calculated a VPN solution with a total bandwidth of 4,2 TBit. Only the Infrastructure will cost round about 600.000 EUR per year. But there is no man power, Software or anything else calculated.

How the hell they are able to provide a free of charge VPN without selling data???
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Damn Torsten, you had to ruin it again for me! [emoji39]

Can't I have at least the illusion of privacy for once? [emoji13]

I don't really think they sell user data though, at least not personalised. They make a big deal of not keeping logs and they've been independently tested on that. A service like Ivacy is quite popular and has many paying users, most of them on monthly basis as the average consumer doesn't always find their way to these lifetime subscriptions. Also keep into account that not every user makes much use of the service.

I'm sure if you had a few thousand keweon subscribers paying $/€/£/¥5 each month, that would enable you to pursue some of those wild ideas you have. Right?

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir [MENTION=304818]MrT69[/MENTION], ??

I want to use custom Dns service in Nord VPN but when I put dns.keweon.center in the space it says it is invalid.

Can someone please help me out? ? :confused: :)
[Android Software/Hacking General [Developers Only]] MrT69:
Of cause, sometimes it seems it’s a big dream and no worry. If it’s possible from the financial point of view then I will definitely do it.

If you ask me about my famous goal within a few years:

Buying 2 data center and building the world largest Internet laundry to clean up Websites from all this crap. Why? Because I know how to do it and I just want to proof it that it is possible to keep the internet clean from threats.

It can’t be that we must watch ads. It can’t be that they don’t care about there ads broadcasts and they share ransomware or virus or whatever. It can’t be that I don’t agree to data collection and they ignore it. This discussion is public since more then 20 years and then EU politicians explains „we have to accept this threats because we can’t prevent this“. From my point of view this is a huge lie.

A clean and safer Internet. Yep. That’s my dream.
[Android Software/Hacking General [Developers Only]] MrT69:
I guess you need to use IP address for this. At the moment we are building the website which will contain all this infos.

As temporarily solution take a look at https://reinstall.keweon.center because they are physical and they are the fastest.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update:

I know the blacklists are still within a messy condition but this has it reason. On the one hand I still need more user feedback. This is very important to find and get less false/positive results.

On the other I have had the situation that someone tried to steal my blacklists. With the current situation he get only a terrible nightmare. Have fun with this whoever this was.

Because of the lot of manual work from my site and the long response time until the white-list will happens my Web-Developer is working on an almost automated solution.

https://youtu.be/WnSETZ0xZNU

Currently we are testing it. In the meantime keweon has not only friends and because of all the haters we need to make sure to prevent fraud usage.

Our idea is now:

We add to there a registration. This data stay confidential (GDPR/DSGVO conform) only within our system. Based on the registration you will get an API key. This API key will grant access.

Within the Database there are the following tables:

Reason of mesage (white/black)

URL (The URL which needs to be white/black listed)

your mail address (for security reasons)

Timstamp (when was this reported)

On a long term the goal is that some users will get the option to write direct into the database. This can be only done if there is a real trust between the user and keweon and if we can make sure this user will report only real good results.

Within technical facts this would mean:

1. You open a website which is blocked

2. You report this site to the report server

3. The server process this URL via the white list

4. The server process this URL via the AV database

5. The server process this URL against Online AV and local AV

6. If everything is OK, the address will be unlocked - or it will be blocked. (depends on your reporting)

Maximum time from user report to a full working unblock or block is round about 10 to 30 seconds.

It is of cause exactly the same procedure when a user report a URL which needs to become blacklisted.

No one is perfect and error might happens. So we log this info, keep this for internal usage the next 2 to 3 days and latest at the 4th day we drop this because there is no longer need to keep this information's.

I want work close together with the reporters and users and when we want to contact you for further information then it's much more easy to get in contact.

Let me know about your ideas!

What's good, what's not good, how we can do or manage this better.

Now it's your turn & feedback would be great!
[Android Software/Hacking General [Developers Only]] Steelskinz:
With the API token thing, will it still be possible to use keweonDNS on dnsmasq or pi-hole/adguardhome linux board ? Thanks.
[Android Software/Hacking General [Developers Only]] MrT69:
Of cause. Let’s assume u don’t use keweon and use the Reporting plugin.

Then even this will arrive the server.

This is complete independent.
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir I am using this Dns server but it is still showing ads..

Here is the Url..

https://ihackedit.com/hotstar-premium-apk/
[Android Software/Hacking General [Developers Only]] GamaShani:
Sorry Sir [MENTION=304818]MrT69[/MENTION], I quoted the wrong post..
[Android Software/Hacking General [Developers Only]] Steelskinz:
Will you add a porn blocked list in the future like cleanbrowsing or adguard dns ?
[Android Software/Hacking General [Developers Only]] MrT69:
Yes, there will be one solution. This should become the 1st "product" which is called "keweon kidSafe". This is to block violence and pornography. In addition there will be a Management Website where parents can control what the kids can do or can not do. There will be the option to "backup" the settings within the cloud but for privacy reasons everything is working without a cloud.

This will be one of the first developement. At the moment I'm dealing to get an Investor and/or a Crowdfunding. I don't know if I am allowed to implement all this, because it is a question of money. I cannot and will not be able to do it alone.

There are 1000 of more options. If the first one will work then the rest will come step by step. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Will this now work free of ads on your site? If not - which browser you are using? On chrome and IE it's free of ads.
[Android Software/Hacking General [Developers Only]] GamaShani:
It's working fine.

Thank you so much Sir for your hard work. :good::)
[Android Software/Hacking General [Developers Only]] MrT69:
Blacklist Update:

If you want to extend your private blacklist or if you know any awesome additional blacklist which can be added to the blacklist Database let me know this please:

https://pastebin.com/raw/AsnKMgWF (watchlist-internet.at) - 5786 ENTRIES

https://pastebin.com/raw/UP3s7pEB (fakeinet.com) - 1424 ENTRIES

You can share them to anyone who want's to have. Additional public lists will be listed within all pastebin postings.

To share dangerous threats or URL's just on a website will not help anylonger.

Best regards,

Torsten
[Android Software/Hacking General [Developers Only]] pxrave:
Instagram is on blacklist. Don't load images and messages.

Bosch home connect server on blacklist. Can't upgrade firmware.
[Android Software/Hacking General [Developers Only]] ticktock666:
Is there a method to use the dns without virtual vpn apps? I'm on Android 9 and my device is rooted, previously I used the magisk module but it hasn't been updated in a while, and I need to use an actual vpn while browsing so the fake tunnel method is not an option.

I've looked into using an init.d script, but hasn't been successful so far, so any help or pointers world be greatly appreciated.
[Android Software/Hacking General [Developers Only]] rmn.br:
You can have look on Pie here:

Settings > Connections > More connections settings > Privat DNS and there set your DNS address
[Android Software/Hacking General [Developers Only]] wkobaint:
There's a simple way to use this keweon on windows10 or Ubuntu?
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Don't forget, search = awesome! There is a "keweonDNS for Windows" instruction in post #5. Ubuntu doesn't instantly show up but I'm sure Ducking for 'setting DNS in Ubuntu' will get you there...
[Android Software/Hacking General [Developers Only]] ticktock666:
Thanks, I know about the private dns option, but I'm looking for a method to use the physical dns servers with the certificate
[Android Software/Hacking General [Developers Only]] levone1:
Getting many ssl certificate errors today. Keweon cert is installed, and I tried several different dns from your lists, including: 176.9.62.58, 213.239.207.143, 45.77.144.132...

Android 8.1, stock rom TCL/Alcatel

Thanks
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
hello.. whenever i put primary and secondary dns on my xr500 router i get lot of different hostnames including 6 google and keweon on dnsleaktest.. but if i enter dns.keweon. com on my phone and run the test i get only 1 keweon histname. is it ok?
[Android Software/Hacking General [Developers Only]] MrT69:
keweonDNS Update

Ok... let's go to the final round and I hope some of you can test it.

This server:

test.asecdns.ch (DoT/Privacy DNS at Android)

provides now DNSSEC as promised a long time ago. All filterlists are active.

The most funny thing for me is that DNSSEC was developed to prevent DNS Server as like as keweon against filtering.

Ignoring facts and reality has always been a strength of mine. Hope you enjoy this.

I would need some feedback about filtered sites and if they are working. Don't care about the filters and the false postive. Just take a look at your favorite site if it's loading.

NOTE:

Keep in mind that this is still within a Beta stage and the server is damn slow from my point of view. It's useable but it's only for testing. The Server is also not redundand and no HA.

The server will be offline at Monday the 2nd of March at 20:00 GMT +1
[Android Software/Hacking General [Developers Only]] MrT69:
Yes. This is absolute OK. The server are camouflaged and this is a wanted false result. All servers are direct connected to Root Servers. There is no Google connection.

If some adblock blocker dev will have the idea to block the DNS Server based on a result as like as you see this within dnsleak test then this will not work. That's the trick behind this feature.
[Android Software/Hacking General [Developers Only]] MrT69:
Do you still have Cert Errors??
[Android Software/Hacking General [Developers Only]] MoHuToP:
Can't connect. Is any know-how to use it?

5 hours later everything is fine. Start testing mode -> on
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Can not conect either
[Android Software/Hacking General [Developers Only]] MrT69:
test.asecdns.ch (Update)

Sorry, my bad. The server is fixed.

In the meantime I found some (cosmetic) errors/bugs but finally it's working as expected. Keep in mind this is still within a Beta status.

I also informed the Germany BSI (German Federal Cyber Security Authority) about the Server because they hype this damn DNSSEC so much. The Dutch Internet Standards Platform is also connected to this server for some test. I'm honored.

I stand by it. If something only pretends security then it is not security.
[Android Software/Hacking General [Developers Only]] levone1:
Yes. Particularly on XDA...
[Android Software/Hacking General [Developers Only]] MrT69:
Therefore exist the Root Certficate.

If you block with HOST or PIHole then you will allway get this stupid error message. When you block Ads & all this crap it's a normal behavior.

Therefore exists the keweon Root Certificate. It's only there to supress this error messages, it will also prevent Adblock detection and in addition it will speed up your website because there are not anylonger HTTPS errors.

Go to https://pki.keweon.center - download happens after 3 seconds. Install it and you will see the difference.
[Android Software/Hacking General [Developers Only]] wkobaint:
Hello,

Does keweon certificates works on Android 10?
[Android Software/Hacking General [Developers Only]] MoHuToP:
I can't connect to test.asecdns.ch for N days in a row. Its experience any issue?
[Android Software/Hacking General [Developers Only]] nussbaum:
MrT69 wrote in his inititial announcement of test.asecdns.ch:

"The server will be offline at Monday the 2nd of March at 20:00 GMT +1"
[Android Software/Hacking General [Developers Only]] levone1:
Cert was already installed - screenshot - that's why I was asking. I am using a phone without system r/w access, so wondered if that might be an issue. But I installed the certificate and there were no errors, and it shows installed in cert mgr... I'm using Naked Browser...
[Android Software/Hacking General [Developers Only]] Idroit:
Yes, it works with any OS.
[Android Software/Hacking General [Developers Only]] levone1:
Stopped today. No errors now. Only thing I changed is to allow device admin - not sure if anything changed on your end...
[Android Software/Hacking General [Developers Only]] levone1:
Ok, so seems like the issue is with Naked Browser - sorry.. It's my favorite browser, but I guess it needs a new update or something. Other browsers are fine...