yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
I'm with you. Absolutely. I never thought about playing around with flags because this is some kind of a nightmare.

Within companies you don't have a chance to set this flags for all users via GPO and ActiveDirectory. Chrome is possible because within my company I see that various things are disabled by Admin.

Regarding the performance it might be also a problem with my DNS Servers. I have had done a test 3 yrs ago with the Server provider from HolaVPN. Damn cheap but damn slow and my internet at home was not useable. It was so incredible slow and it was only me who was using it.

I know my DNS Servers are some kind of a kid stuff. It's working and compared to Google it's ridiculous. But they are working and I'm aware that this is definitely a bottleneck when you play with different timeout values.

But let's see what we can do with the settings. Your settings above are definitely a good point to start. I will dig through the settings today within the office and I'm pretty sure at the evening today I know a little bit more about them.

Well done an million times thanks for this inspiration and it's also good to see that not only Chrome is in use ??
[Android Software/Hacking General [Developers Only]] micgeb:
I get this error with the Amazon Shopping App.

https://play.google.com/store/apps/details?id=com.amazon.mShop.android.shopping
[Android Software/Hacking General [Developers Only]] MrT69:
When do you see this error? Is it by opening the App or within the search bar?

Which country you are from?

I have no problems with the App and this must be related to geo location, that's why I'm asking.
[Android Software/Hacking General [Developers Only]] micgeb:
I am search for a anything and I get the error Screen. I am German.

Today I don't have this Issue.
[Android Software/Hacking General [Developers Only]] MrT69:
Ok... that's interesting. I have had found one NA (North America) entry and after asking a few users within EU it was working.

May I ask what device you have? Because sometimes this is also a device related problem. On my HTC I can lock down Amazon to the hell. But when I use this settings on my wife's Samsung she only get the dogs.

Keep an eye on it and as soon as you see something wrong please give a short notice.

Thanks a lot!!!!
[Android Software/Hacking General [Developers Only]] jawz101:
https://support.mozilla.org/en-US/products/firefox-enterprise
[Android Software/Hacking General [Developers Only]] denvinbo:
Hi, i wanna ask. Does this work on Wifi Router? Im using Adguard DNS but it doesn't seem to block that much ads for my family's devices.
[Android Software/Hacking General [Developers Only]] MrT69:
Of cause. That's the initial idea behind of this.

Set it on the router an the entire network is safe. This will also make the DNS requests a little bit more faster ?

Is AdGuard really not blocking so much ads? I never have used them.

A few people have had already compared keweon against Cisco Umbrella, Sophos, Meraki and PaloAlto. I was not surprised that the big players have loosed because I don't believe they want to become enemies of the Ads industry. From this point of view it's OK.

But AdGuard has a giant Team just for this. I'm seriously surprised about this.
[Android Software/Hacking General [Developers Only]] MrT69:
WTF... FF & GPO support??? Can't believe this.

Million times thanks a lot for this.
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
I'm getting this error as wel on the Amazon app..im fm india..using 176.9.62.58...
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Same here. From Belgium, using German Amazon. DoH server applied via Nebulo.
[Android Software/Hacking General [Developers Only]] MrT69:
An update yesterday was going wrong. At the moment I'm working to fix it, I guess within 1 or 2 hours everything is working again.

Thanks a lot!!!

Edit:

Done! Database full restored.
[Android Software/Hacking General [Developers Only]] MoHuToP:
Hello there. Can you check winehq website? I've got insecure request. Thanks
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Confirmed. Cheers! ?
[Android Software/Hacking General [Developers Only]] MrT69:
Should work within round about 20 minutes ;)
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Fixed.. thankks.
[Android Software/Hacking General [Developers Only]] MoHuToP:
Thank you so muck for efforts and your services. Another hit - https://mail.yandex.com/ - certificate error
[Android Software/Hacking General [Developers Only]] MrT69:
This happens because it's on the Blacklist. No worry, i will remove this.

But i have a generell questions about Yandex. Based on a few hosts file they gone block almost all of them. On the other hand I receive a lot of false positive requests about Yandex.

Can someone tell me more about this? Even within the Internet it's not possible to identify if this is evil or not?
[Android Software/Hacking General [Developers Only]] MrT69:
Apple silently removed AdBlocker tools from Safari.

This was done because Apple has a hard contract with Google to keep Google as default search engine.

Just for the default search engine? That's ridiculous.

keweonDNS is still working on MacOS and iOS to remove all ads.
[Android Software/Hacking General [Developers Only]] MrT69:
I would need some translation support at this page:

https://firebase.google.com/docs/app-indexing/android/personal-content

Within the blue privacy frame there is a sentence which I don't understand.

By default non data to Google...

Does this mean it's not possible or does this mean the Dev or someone else can change this without informing the users??
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
The Firebase App Indexing has the same privacy note. The way I interpret this is that it is definitely possible to send usage data to google servers but the part where users are informed is a dodgy one.

Since the Google app is required to gather this data (to make it searchable), users must have it installed. Of course, virtually every smartphone is shipped with the Google app and I believe privacy consent (to send this data to Google servers) is acquired when setting up the device – the small print nobody reads.

From a dev point of view it's probably possible to select which data remains on the device and which data can potentially be synced to all devices a user has linked his/her Google account to (with syncing turned on). For example: a weather app on a phone remembers set location and syncs this to the user's tablet but rain notifications are only wanted on the phone so those notification settings remain on the device unsynced.

Again, just my interpretation. I think you need a legal expert to get a solid answer to that question :p

P.S. I just turned on my keweon powered Nebulo and it caught 61 connections in 10 seconds so I'm pretty sure our data is flying all over the place without any consent or notification! ^_^
[Android Software/Hacking General [Developers Only]] MrT69:
First at all thanks a lot for this answer.

It doesn't matters what they do but with some big players I have always a bad feeling when they offer awesome tools.

I know they have a privacy declaration but from my point of view almost any "privacy declarations" are just for legal reasons but they don't prevent any kind of data collections.

Since round about 2 weeks I see within Chrome an lot of hidden request to this URL:

http://lumtest.com/myip.json

I don't know if this is just only within Chrome or is it one plugin. Because of business duty I have currently not the time to do a deeper investigation on this. I know there are more scripts behind of this lumtest address and I have seen it's a bad idea to block the domain entirely. So I found a different way ?

I would need some Apps or more details about this firebase implementation because it might be a bad idea to block it entirely. This might cause a full block of the App which is not the best idea. I have had the same problem with appspot.com domain. There are a lot of Apps which was not longer working. On the other hand they share poison malware on a few subdomains.

https://isc.sans.edu/forums/diary/Guildma+malware+is+now+accessing+Facebook+andYouTube+to+keep+uptodate/25222/

From my point of view this firebase API should be locked down because it's indexing too many things on mobile users. It even has access to pictures and other sensible use data.

My english is not really longer the best but if even native speaker didn't understand this privacy declaration then I have concerns.If there's any room for interpretation and they have access to high sensible Data of each single user then this is a good reason to lock this down.

Thanks a lot again for your efforts.
[Android Software/Hacking General [Developers Only]] rmn.br:
Every time I'm rooted (not now) I use aplication My Android Tools, it can disable App Measurement, Firebase indexing and never had a problem when they were disabled, at least with my experience.
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot!!

After checking the blacklists a few domains was already blacklisted.

I have locked it down complete and update is now running. Let's see what will happens.

;)
[Android Software/Hacking General [Developers Only]] MrT69:
Because it was a lot last month - I thought - I was afraid that all this would become less again. Not at all.

The traffic has increased by more than 24% in the physical area. In total I now have 1.7 TB of DNS traffic.

I am really speechless...

THANKS A LOT TO EACH SINGLE USER!!​
[Android Software/Hacking General [Developers Only]] NightFox029:
Congratulations,btw is this your hobby project or is it commercial,if its commercial how do you monetize this service without logging anything?just curious :confused:
[Android Software/Hacking General [Developers Only]] MrT69:
At the Moment everything is just for PoC/PoT and I'm still within a search for an Investor. The DNS only solution will stay as free of charge project for private and personal usage. This is one of the core conditions from my side.

For business usage there are various models and they need to pay because they have huge business advantages. The Service for Business is a different support, dedicated protected hardware and 24/7 monitoring.

This will e.g. faster black/whitelisting within 5 Minutes, own Certificate because it's developed for white labeling and a few other things.

The licensing will anyway free of charge for private usage and licensing models are already developed for various business environments.

There will be also a license check. Private user will get a website where they see the free edition and only from inside the company network the same site displays a license information when they have paid for it.

One example is the traffic limittation. The average traffic reduction per user and day was at 280 to 530 MB within a huge Business environment.

A relief of the network is always a good selling point. There are a lot of other additional benefits for business.

The adblock is almost a funny thing but all the poison things or even Ransomware is able to cover. Which system is the first system a user will contact before he download such a thing?

The file arrive, user click on it, the init starts and the very first system which is required to download the rest of this crap is DNS. Although some companies are not interested in ads and other things some has it's own marketing department and for some reasons they need to have access for them to Google Adsense or Advertising. That's OK and they can have this without impact to other users.

I already have a few companies who are really interested about to test and to use it. But for business usage the current system is absolute not useable. No redundancy and the missing speed is something which no one should use within a business environment. DNS is a high critical system. If this went down then there is a holy darkness.

?
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir, [MENTION=304818]MrT69[/MENTION] ??

Sir this site is detecting that I am using KeweonDNS..

I am using Dns.keweon.center with certificate installed in the root directory.

Sir I have also attached the screenshot.. ? ✨
[Android Software/Hacking General [Developers Only]] MrT69:
OK, I have double checked this. It's the App which causing the problem. Within browser it's working.

So you have now 2 options. Either you download it via browser or you put the Certificate within the System partition.

Can you send me the App via Telegram or Mail?

If you have a rooted device copy the CERT into System partition. If it's there also all the Apps will use the Certificate.

>> ROOT CERT MANAGER - PLAYSTORE <<
[Android Software/Hacking General [Developers Only]] MrT69:
Update:

Because of problem of the IPv6 stack on almost any VPS server it was a need to upgrade the kernel. The interfaces are now reconfigured and IPv6 is now working again.
[Android Software/Hacking General [Developers Only]] GamaShani:
Thank you Sir [MENTION=304818]MrT69[/MENTION] for your prompt reply. ?

I am using Android 9 Pie Private DNS feature with the certificate installed within the system partition..

The app doesn't exist for the above URL.

It is only accessible through the Web browser.. ? ✨

Sir I have attached a another screenshot, it is still detecting that I am using Keweon..
[Android Software/Hacking General [Developers Only]] GamaShani:
Here is the screenshot that I have captured right now..
[Android Software/Hacking General [Developers Only]] MrT69:
Which browser you are using?

I'm also on private DNS (dns.keweon.center) and on my mobile it's 24/7 running ;)

When I'm using it without CERT then this happens:

[IMG="Without Certificate"]https://i.imgur.com/KszAhO2.png[/IMG]

On Android with Chrome and Cert it's this:

[IMG="With Certificate"]https://i.imgur.com/pt2p1tp.png[/IMG]

Also with Safari on IPad 1:

[IMG="Safari"]https://i.imgur.com/JOZa0fe.png[/IMG]
[Android Software/Hacking General [Developers Only]] Shadow337:
Is it normal that airdroid is blocked on browser( site ) and apk?
[Android Software/Hacking General [Developers Only]] GamaShani:
Here is the screenshot with respect to the PM I have sent to you..
[Android Software/Hacking General [Developers Only]] MrT69:
This is a strange things... Do you have any additional adblocker enabled?

Do me a favor and reboot the device.

When the Cert is within the System any App and Browser will use it. Test ist very easy:

Open the website https://adblock.keweon.center and check if you get a blank page. If it's blank then the Cert is working. If it's a HTTPS error then the Cert doesn't work.
[Android Software/Hacking General [Developers Only]] MrT69:
Complete whitelisted... update is in progress ;) Thanks a lot.
[Android Software/Hacking General [Developers Only]] GamaShani:
I am getting a blank page, Cert is working. :good:

And I am only using dns.keweon.center, not any other Adblocker. ?
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir, here are the updated screenshots, I have selected the first two options for clearing the data of the Chrome Dev.. ?
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir I have tried with brave browser with Keweon disabled, and since Brave also blocks ads, it is detecting it also..

On PC I am using Chrome Dev with Ublock origin, it doesn't detect it then.. ?
[Android Software/Hacking General [Developers Only]] MrT69:
Does Brave Browser also have some kind of Ads Bocker inside? I was testing it with brave browser also and I get an AdBlock notice.

Just use a normal browser as like as XBrowser or something like this. When you use keweon you don't need any additonal Adblocker solution. I always recommend uBlock or something like this without any lists because they are doing a damn hell good Javascript filtering. That's not possible with keweon.

I'm running on Android XBrowser, Chrome, IE, FF, Samsung Browser & kiwi. And I'm not a fan of embeded adlblock because this causes almost troubles with keweon. If you want to use additional adblock solutions then use uBlock just only but my experience with this is very limitied and just theoretical.
[Android Software/Hacking General [Developers Only]] MrT69:
Brave Browser:

For actual reasons here are the settings for Brave Browser.

I have seen that brave has some kind of embeded HOSTS files and it seems they are not the best quality.

With keweonDNS just disable Brave's AdBlocking feature and keep the rest of features enabled for a better quality of adblocking.
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir, I always use Chrome Dev and I downloaded Brave Browser just for testing..
[Android Software/Hacking General [Developers Only]] MrT69:
If you use Chrome then please check the settings within the picture below.

?
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir, I already have this option disabled, and for reassurance I downloaded Microsoft Edge and Firefox Preview browsers to reproduce that anomaly..

And guess what, in both the browsers the site is detecting that I am using the KeweonDNS..

I think that they are some nasty tech to detect Adblock.. :(

But why this doesn't happen when I use Ublock origin on my PC?
[Android Software/Hacking General [Developers Only]] MrT69:
I really don't understand why this is not working on your side. I was also asking a few people to test this and it's working without any problems.

uBlock is a nice tool to remove all the Javascript crap and therefore it's a good combination to use it with keweon.

At the moment I have no idea how to test it or to double check this because within everything I'm testing it this is working. At the moment I'm sitting on a MacBook Pro with just keweon on it and within Safari and Chrome it's working. I just want to know why it's not working on your side.
[Android Software/Hacking General [Developers Only]] MrT69:
I have a small update installed that DNS answers faster performs.

This idea was inspierd by CISCO but they use this technology for something completely different.

If I would have now a CISCO switch and the infrastructure behind it this would become awesome. At home it runs incredible but LAN Test is not a real test. ?

However, it seems that you do notice this online. Feedback is welcome.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Speed is faster.
[Android Software/Hacking General [Developers Only]] GamaShani:
I don't know how to tell you Sir..

From whole day I trying to find it out, but of no use..

I don't know what to do..:(:crying:
[Android Software/Hacking General [Developers Only]] micgeb:
I have the same Issue.

I had already seen this adblock message on another page. Unfortunately I do not know the page anymore.

Bild.de is don't working too, but I don't use this site.

If I turn off private dns, both sides will work.
[Android Software/Hacking General [Developers Only]] MrT69:
bild.de is working but just only with the Cert. They working with Adblock detection and HTTPS error. This is a good example why the cert is build.

Almost any adblock detection working with this kind of errors. Can you please send me the 2nd link which is also display the Adblock error message?
[Android Software/Hacking General [Developers Only]] micgeb:
The cert is as system cert installed.

The second link is this:
[Android Software/Hacking General [Developers Only]] MrT69:
Which browser you are using?
[Android Software/Hacking General [Developers Only]] MrT69:
Do you still believe "SSL/TLS is safe"?

It's not. I'm talking about this since years and the first advertising platform has now proofed this.

They are adding the ads into the TLS stream and the link below shows in detail how they are doing this.

I know this kind of technology since a long time and it's nothing new for me.

This was also one reason for the Certifacte to protect users. I'm prepared since a long time. keweon is also prepared.

What's about you?

CLICK HERE 4 MORE
[Android Software/Hacking General [Developers Only]] rmn.br:
Just want to say, everything run flawlessly. I started using Keweon also on PC with cert, inline with AdGuard, basically I see ZERO ads and ZERO adblocker detection.

Local websites with movies and episodes had during one episode around 6 pop-up (every click another) ads which was super annoying, right now ZERO. Like a BOSS haha

Thank you so much for Keweon!
[Android Software/Hacking General [Developers Only]] micgeb:
Firefox, Opera, chrome.
[Android Software/Hacking General [Developers Only]] MrT69:
To the idiots who try to steal or copy keweonDNS

Do you really believe I'm too stupid not to notice this? Although I'm not doing any logging I know it but unfortunately I don't know who you are.

If you think this is a way to copy over the blacklists you may have no success with this because I'm not a idiot.

More then 300 GB traffic suddenly within a few day's and at the 7th October you switch off? Come on... Who the hell you are?

The public Servers contains round about 40 Million entries. My private server actually has 163 Million entries by daily growing of 6 to 8 Million entries.

Because of financial limitation I can't use the entire database on the current systems. If I would have the AI solution we are talking about 700 to 900 Million entries within the blacklists.

If you want to have them then talk with me. Google me and you get everything about me. I'm not hiding on the Internet.
[Android Software/Hacking General [Developers Only]] totalcmdext:
Hi,

The config file and host file must be updated based on https://reinstall.keweon.center/?

Please provide the updated files in order to have DoH in Windows 10
[Android Software/Hacking General [Developers Only]] aL_09:
I can't gaming at all using this dns, game lags... but after all no ads when web browsing and pretty decent loading time :)
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Works great here. Which game were you trying? Please include the Play Store link.
[Android Software/Hacking General [Developers Only]] aL_09:
It's the new Call of Duty Mobile, can't even login using the dns...

Here you go... https://play.google.com/store/apps/...ile&pcampaignid=APPU_1_isylXYv1Bo671fAPjuSGMA
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Ah yes, I've had mixed success with keweon. I'm using Nebulo to easily switch keweon on and off. Can you look into this one, [MENTION=304818]MrT69[/MENTION]? Pretty please 0=)
[Android Software/Hacking General [Developers Only]] jyoti.id:
How to use nebulo???
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
It's really straightforward. Just add the keweon DoH server and fire it up. See attachments for visual instructions. You'll find more info in the first posts of this thread.
[Android Software/Hacking General [Developers Only]] MrT69:
Just go to https://pki.keweon.center and wait 3 seconds. The download appears automatically.
[Android Software/Hacking General [Developers Only]] MrT69:
Info

Since 3 days my Laptop is broken and at the moment I need to wait until end of the month for buying one.

At the moment only automated updates runing but it seems this has messed up my blacklist database.

Hurray...

I can clean up everything this evening with support of a good friend and I will also disable this automatically thing.

I'm so sorry for this.
[Android Software/Hacking General [Developers Only]] rmn.br:
Hey I want - can send you some coffes or 0.05% price from laptop :)

but I didn't find link for it. If you accept some small donations send me please info, PayPal is best...

edit: oooo now at PC I see donate button, I absolutely forget it :highfive:
[Android Software/Hacking General [Developers Only]] MrT69:
Security dream?

DNS-over-HTTPS does not prevent ISPs from tracking users' web traffic

I'm talking about this since months. And sometimes I have the feeling I just talk to myself.

DoH helps to prevent censorship and it makes DNS requests invisible during the transmission. That's it!

Governments are still working to forbid DoH and in summary this are a lot of good reasons to support it.

https://zd.net/2OVwYTu