yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Youtube Info

This thing is driving me crazy. Sure, it's not a problem to filter all by a proxy but as you know this is not an option.

On Desktop it's working without any problems but on Mobile devices with diffent Apps round about 10% of the Videos are not working for some reasons.

I guess I don't need to explain it makes no sense to ask Google for technical details.

I have done an additional setting and I hope it's better working. Actually my daughter is testing it and until today I haven't received any complains. I will need some more tests but it seems it's better.

As soon as it's online I will inform you.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Just be careful not to spend too much energy on that. We all know how erratic Big G can be with their services/APIs/apps/etc. YT is getting non-functional updates at least once a week just to bug the hell out of freelance development.

Lol, not really but you never know with those guys. One day they'll put all their cards on the table and the other they'll be frantically hiding them in a quadruple secured vault (in a heavily armed military base... 600 feet underground).

On a keweon note: I've had some trouble loading thumbnails before or even being unable to (dis)like videos but then some videos would play fine. I've added YT to the exception list in Smokescreen because it's obsolete anyhow as I'm using Vanced YT. Let's just rely on those guys for now; they're doing a fantastic job.
[Android Software/Hacking General [Developers Only]] surya790:
Yes sir, I don't think you should stress too much on the YouTube issue the vast majority of videos play successfully and even on those videos it's easy af to play them on browser apps.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Info

A lot of people are wondering often wondering why I'm not able to setup keweon on a stable platform and why is the base invest so high.

On the other hand I guess I have invented the wrong idea because it's indeed incredible expensive.

Now, let me show you how I have had designed the Data Center Infrastructure. In 2015 I was able to use 12 HP Servers and within different tests I have had designed and developed this kind of Infrastrcture.

For Germany and EU the average PING time to the Servers was about 1 to 3 ms. Within US i have had round about 2 to 6 ms DNS response. In summary it was round about 20 times (!) faster than GoogleDNS.

Why?

There are several advantages. I was connected in EQUINIX Data Center which has a incredible global link and in addition there where NO kind of logs. This speed up DNS and your Internet to a never seen speed. All Servers where physical Boxes (HP DL360 G8, 2 x Xeon, 128GB RAM, 4 SSD RAID5)

The planed locations are Germany (Telekom Data Center) in anticipation of a BSI certification, COLT and CenturyLink (former Level3). This system will become tripple available for high availiblity and for better maintenance. Actually I'm planing to get in touch with different providers to give users an option to add keweonDNS direct on the SIM card. In addition there will be a reduction of the Blacklists to offer a more stable system and a few ads providers needs to be adjusted to become a almost 99,99% error free system.

If you will have the DNS Server direct on the SIM Card then it's important that the entire keweon System will have no chance to stumple or stuck. That's the reason of this huge System.

Here is one overview about the Server outline. For security reasons I removed all core Firewall and Switch system entries. The price for this would be round about 3.7 Million EUR by a 3yrs contract. Only passing the traffic via the scrubbing center of CenturyLink will cost round about 6.000 EUR per month. No cabeling, no Server, no Rack. It's just the scrubbing center with dynamic routing against any kind of attacks and of cause DDoS prevention.

But there is much more security then this because I don't expect I will get a lot of friends from the Ads industrie with this when the system will be ever online.

If 370.000 Users will place a 10 EUR donation e.g. within a Crowdfunding then the system is paid for round about 3 yrs. This give enough time to place a business case on this and your reward will be free of charge System for a cleaner and safer Internet.

That's the Idea. And this will finally become YOUR system.
[Android Software/Hacking General [Developers Only]] SimplyCity:
My good MrT, Men! Keweon going Wild! Wonderful! I'm proud to be its user. And donate with pleasure. Is the campain already open?

Echoe[emoji769] team member / N8 Oreo
[Android Software/Hacking General [Developers Only]] MrT69:
Not now. I guess it's better to ask someone for support.

If I would do this it would become a nightmare ;)

And a lot of thanks! I hope it will be funded within this way!

This would be real incredible!!
[Android Software/Hacking General [Developers Only]] MrT69:
Some guy's send me a few huge blacklist/whitelist. Please contact me. The lists are incredible but I can't process all things. Let's talk about this.

Thanks a lot in advance!!
[Android Software/Hacking General [Developers Only]] MrT69:
Does anyone know's how to do a "TempRoot" on Samsung S9+ device?

Since the penultimate update Google has implemented a new Security feature for Android. No Apps will now longer take and use "User based Installed Certificates". This is implemented within the OS by default.

It might be that this has something to do with keweon - but it can also be a coincidence. ;)

I still want to use my Certificate to block all the crap within Apps but I don't want to root it. That's why I'm asking for a "Temp Root" Option on Android. This "security feature" is definitely a reason to buy an Apple device the next time.

I'm so pi**ed about Google!!!! It's not a feature. It's a f**k you to all users! This is ridiculous!!!
[Android Software/Hacking General [Developers Only]] Anarconda:
Are you sure is a Google and not a Samsung thing? Because it's true I'm rooted but I can do it from settings.
[Android Software/Hacking General [Developers Only]] MrT69:
A user told me that Google has excluded user Certs by default within Android OS.

https://android-developers.googleblog.com/2016/07/changes-to-trusted-certificate.html

Can someone explain this to me in detail????

https://developer.android.com/training/articles/security-config

As far as I understand this it's required to build the App. By default Android trust only the default CA. Now my Idea is to do a TempRoot and add my Certificate to the default store.

Damn!! It's round about more then 10 yrs ago when I build my last ROM.
[Android Software/Hacking General [Developers Only]] Anarconda:
As you can read there is for apps using old API (level 24 and before). New security framework.

My guess is: Samsung Knox is really what you need to blame. But, obviously, I'm not an expert in security.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Facts & Infos

Yesterday I was taking a look at the Certificate download statistic because I was interesed if this will be used. AND I WAS SHOCKED!!!!

From 1st of January to the 20th of January it was round about 2.8 Million (!) downloads.

Today I did again a look at the counter:

I'm really speachless about this.

Million times thanks a lot for you trust into me and keweon!

I'm really proud of each single user!​
[Android Software/Hacking General [Developers Only]] wkobaint:
Good job for your hard work man
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir [MENTION=304818]MrT69[/MENTION], I found some more nuisances.. ??

Have a good day ahead Sir. ? :good:
[Android Software/Hacking General [Developers Only]] MrT69:
What's going wrong there? Can you send me the App Link?
[Android Software/Hacking General [Developers Only]] MrT69:
It has taken some time until I have seen the problem.

Give it now a try again ;) At the moment I upload a new update.

Take a look again!!!
[Android Software/Hacking General [Developers Only]] MrT69:
OFF TOPIC

This is a good example why I'm still searching since 3 yrs for an Investor and has not agreed to any "good option".

https://www.top10vpn.com/free-vpn-android-app-risk-index/

I rather would delete everything but Data collection or selling user data is never ever an option. Why the hell they believe this will never come up?

This guy's are responsible why user will lost trust into security. I'm not wondering why people will loose the trust into anything.

For me this page is a real pain. I can't believe this...
[Android Software/Hacking General [Developers Only]] GamaShani:
Problem annihilated Sir :good:,

Have a wonderful day ahead.. :):svetius:
[Android Software/Hacking General [Developers Only]] :
Since at least yesterday, probably 24 hours or possibly more, this site has been broken using Keweon with certificate.

https://www.dailymail.co.uk/ushome/index.html

I get a really poorly formatted page with a lot of black text missing and just white background with links displayed.

When I tested with a non-Keweon DNS it displays correctly.
[Android Software/Hacking General [Developers Only]] MrT69:
As soon as I'm at home I will fix it.

Thanks for this feedback ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Number of the Day:

17.566.516​

This is the "official" keweon AntiVirus blacklist count for 2018. It's done by a limited API on my site. With all of your support it was possible almost double the amount of collection compared to 2017.

It contains Virus, Ransomware and Coinware.

I'm really impressed. Thanks a lot to you!!!
[Android Software/Hacking General [Developers Only]] brezzz:
I entered the dns settings into my router and restarted it but my Internet speed fell from 100mbps to 8mbps. After reverting the change, my speed is back to normal. Have I done something wrong?
[Android Software/Hacking General [Developers Only]] MrT69:
OK, I know my DNS Servers are not the fastest but this speed reduction is not possible.

Which country you are located?

And I don't know how they do the measurement. May be this is false because for some reasons.

Do me a favor and give it a try even when it's display 8mbps. Can't believe this...
[Android Software/Hacking General [Developers Only]] brezzz:
I'm located in the UK, so I used the London and France servers as I figured they were the closest.
[Android Software/Hacking General [Developers Only]] MrT69:
From UK this should be a better combination and when you use the Certificate take this:

Primary:

IPv4: 213.239.207.143 (physical Server)

IPv6: 2a01:4f8:a0:8487::143 (physical Server)

Secondary:

IPv4: 107.191.55.215

IPv6: 2001:19f0:6401:175d::215

Without the Certificate use this:

Primary:

176.9.62.58 (physical Server)

2a01:4f8:150:8023::58 (physical Server)

Secondary:

45.32.183.39

2001:19f0:7402:a61::39

The first servers has extended Blacklists at facebook, Amazon and a few others. In addition a lot of sites will not work without the Cert because this DNS has harder Blacklists.

Test it and let me know your feedback. Million times thanks in advance!!
[Android Software/Hacking General [Developers Only]] brezzz:
Hi

Thank you for your quick response. I will try this again later and report back the result.

Cheers
[Android Software/Hacking General [Developers Only]] TheRedmiBuddy:
I'm using the magisk module is there any way to White list sites
[Android Software/Hacking General [Developers Only]] SimplyCity:
Yeah, following OP:

"If you want to send blacklists (things that should be blocked) please send them to: blackli.wovqusywx173aog9@u.box.com

If you want to send whitelists (things that shouldn't be blocked) please send them to: whiteli.g2o05glywjqt8zfy@u.box.com"

Do as follows :

- copy whole address of the site you want to be white/black listed and paste it to simple .txt file. Sent that file to one of addresses depending of your needs. Mail shouldn't have any subject. And wait. Mr.T will contact you if is needed, if not - sites you requested action for will be covered by Keweon soon.

:)

Echoe[emoji769] team member / N8 Oreo
[Android Software/Hacking General [Developers Only]] J4jks:
No,by using magisk module you can't whitelist any site or app.

It is possible with using VPN apps like DNS changer app or personal DNS filter ,like apps

Personal DNA filter app has DNS has more features.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Ads in app - but ads are of app itself so may be not possible to block (this ad is like suggestion or self promotion) ?

https://play.google.com/store/apps/details?id=com.jio.media.jiobeats
[Android Software/Hacking General [Developers Only]] MrT69:
Hard to find the ads. I can't logon because I need to add a payment methode even for using the trial version.

Never ever. I would need an account for this or you need someone who knows how to log this Ads.

Sorry, at the moment I have no chance.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update - Info

This weekend I did the biggest update since round about 3 yrs. What was done?

- removed a lot of false things

- adjusted different domains (MSN, Yahoo, etc)

- unlocked some TOP Domains (12.032)

- unlocked some WIN Domains (3.221)

- unlocked some XYZ Domains (22.644)

- pretty up a lot of websites

- lot of security changes

- extend blacklists with more Virus, Ransomware and other threats crap

- and of cause new ads, track and data collection providers

This update was required for demonstration purpose for the German BSI and some companies. As soon as I know more I will also keep you informed as usual.

The update is in progress and should be online within the next hour.

Hope you enjoy this!
[Android Software/Hacking General [Developers Only]] Nezzox:
Does keweon have DNS over tls?
[Android Software/Hacking General [Developers Only]] MrT69:
Not at the moment.

I don't have anymore a free server for this and in the meantime it's anyway over my budget. I'm working to make one free but it's not as easy as expected.
[Android Software/Hacking General [Developers Only]] Nezzox:
Oh ok. I'm waiting patiently then. It would be awesome to use with the private DNS settings in Android pie.
[Android Software/Hacking General [Developers Only]] J4jks:
I think it is from nav.jiobuzz.com ,

I've seen this with Myjio app.

Why don't you take a log with PDF without any hosts blocking.?
[Android Software/Hacking General [Developers Only]] MrT69:
Can you check if this will stop Ads display within the App when you add this to the HOST file?

I can't open the App.

[MENTION=6697942]J4jks[/MENTION]

What is PDF? Can you send me the link for this??
[Android Software/Hacking General [Developers Only]] J4jks:
I think you found all ips, yeah it'll block that banner and other suggestions(these are jio advertisements in other way) in all jio apps, I've blocked navbuzz.jio.com earlier.

I'll try now them all

Thanks

PDF is personal DNS filter

https://xdaforums.com/android/apps-games/app-personaldnsfilter-block-malware-t3567898/
[Android Software/Hacking General [Developers Only]] MrT69:
As soon as you confirm this I will push them to the DNS system. :good:
[Android Software/Hacking General [Developers Only]] :
Regarding Personal DNS Filter, it has recently been released on F-Droid :

DNSfilter (DNS request based Host Blocker over local VPN using a Blocklist) - https://f-droid.org/app/dnsfilter.android

Apologies to MrT69, not to hijack your thread, but this app replaced Blokada for me and I use the app to change my DNS to Keweon.

An advantage is that this logs connections and saves them to a file so perhaps we can figure out more bad stuff which might be suggested to add to Keweon.
[Android Software/Hacking General [Developers Only]] MrT69:
You don't need to apologize!

I know I'm doing it alone and I know it could be much more stronger with more tools and support. Everything what helps to fight against all the Ads is welcome.

If this will help to add more things - everything is welcome. If they have a better tool I also give my respect to it. That's my way. Together we can do it better.

Thanks a lot!
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
Bit confused with all the servers, how did you setup this app for/with Keweon? Just the 176.9.62.58

176.9.62.62 ones?
[Android Software/Hacking General [Developers Only]] :
Touch the box that shows DNS. Then input the DNS numbers and put a check mark in the "hole" that says something like "disable DNS discovery, use manual servers."

I use these with certificate:

107.191.55.215

213.239.207.143

Edit: you can input more than two servers, but I think it only falls back to those if first two can't connect. I keep an additional one in there for another DNS for the rare times Keweon isn't resolving or is blocking too much. I put a symbol in front of the one I want the app to ignore. Like $333.333.333 will be ignored by the app since it isn't formatted correctly. Just move the $ when you want to use that server.
[Android Software/Hacking General [Developers Only]] AeolicLavender:
User-added root certificates are used for data mining, since they allow full control to read or modify any HTTPS connection on device.

Example from yesterday: https:// techcrunch . com/2019/01/29/facebook-project-atlas/ (link removed due to spam protect :(
[Android Software/Hacking General [Developers Only]] MrT69:
A certificate can not do any data execution or even data mining. Also a Root Certificate can no spy out any data.

A certificate only give just a warranty for the way of data because HTTPS is a "End2End Encryption". From Browser to Server. For the Data transmission or for crypto mining you will need always an application or something like that which will do the job. A certificate can never do this. NEVER.

At the moment I prepare in detail what and how the keweon Certificate will work and why it is required or recommended to use it. I will also explain in detail what this Certificate will do and which impact it have and why it speed up your browser and even downloads.

I'm so sad about all the nonsense what people talking about the keweon Root Certificate.
[Android Software/Hacking General [Developers Only]] AeolicLavender:
Why did Facebook use it for its spy VPN then?
[Android Software/Hacking General [Developers Only]] surya790:
Sigh.........
[Android Software/Hacking General [Developers Only]] Mackie Messer:
There is always advertisement in the LEO app. With adblock it was the same, never could remove it.

https://play.google.com/store/apps/details?id=org.leo.android.dict
[Android Software/Hacking General [Developers Only]] MrT69:
With only a Certificate it's not possible. A Certificate can't transmit any data. Therefore an App is required.

Explain to me how this should be possible. A Certificate only establish the SSL connection.

Even with only a valid SSL connection this is not possible.
[Android Software/Hacking General [Developers Only]] MrT69:
I just see only one ad banner and this is at bottom of the app.

It's hard to remove it because it's internal from Leo.org but I will check if I can see a server behind this.
[Android Software/Hacking General [Developers Only]] Mackie Messer:
Yes, this at the bottom is always there. The other one is an exception. First time seen today.
[Android Software/Hacking General [Developers Only]] MrT69:
I hear more and more such temporary Popups. That means the Server becomes more and more too weak.

Damn.
[Android Software/Hacking General [Developers Only]] AeolicLavender:
> First, it requires users to install what is known as a “root certificate.” This lets Facebook look at much of your browsing history and other network data, even if it’s encrypted. The certificate is like a shape-shifting passport—with it, Facebook can pretend to be almost anyone it wants. If you visit the website for a clothing retailer, for instance, Facebook can use the root certificate to pretend to be the store and see the pants you were looking to buy. “You allow Facebook to pretend to be anyone they want to be on the internet—your device will trust the certificates they generate,” says David Choffnes, a professor and mobile networking researcher at Northeastern University.

https : // www . wired . com /story/facebook-research-app-root-certificate/
[Android Software/Hacking General [Developers Only]] MrT69:
It might be that this was a Professor but this statement is nonsense. I heard a lot of things about Certificates and I'm still surprised that certificates can't make some coffee or do a bl*w job.

I'm working since 1998 with certificates and the keweon Certifiate is something which is not technically possible. I heard this from so many "Specialists" and "Experts". At the very beginning in 2014 a good friend arranged a call with Windows OS Devs in Redmond. Exactly this Certificate was one of the reasons why Microsoft closed this call after 3 Minutes because they told me it's technically not possible what I'm doing there.

At the moment I'm writing something about HTTPS and how it's working. It's actually in German language and still not finished. As soon as it's done I need to find someone to translate it into a real English and not into my English. When this is done I will release it here.
[Android Software/Hacking General [Developers Only]] :
MrT69, Keweon is awesome. Thanks for all of your hard work and support.
[Android Software/Hacking General [Developers Only]] murali3127:
I'm living in India. Should I use the main server or the Indian server?
[Android Software/Hacking General [Developers Only]] MrT69:
It's up to you. Test it and choose the best one for you. ?
[Android Software/Hacking General [Developers Only]] Jaruamana:
Upcominf firefox & certificates .

https://www.bleepingcomputer.com/ne...icates-used-in-man-in-the-middle-ssl-attacks/

Have you read the news?

More annoyances for keweon's certificate users.

Antivirus are the problems mainly though.

Adguard certificates for scanning https pages too gonna affect.

What is your views?
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot for this. It will become interesting when this feature is active and how this will work.

It also will become interesting if they do a Proxy check. If they add this kind of feature that would be awesome. This would be indeed a real incredible security feature but this will have impact to a lot of VPN Providers. Almost 98% of them working with Proxies and this feature can very easily help user to identify this.

Let's see what will happens. At the moment I really don't care about this feature. ?
[Android Software/Hacking General [Developers Only]] nomigujjar:
How to install keweon certificate zip on Android ...?